CVE-2025-1673

Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg PUBLISHED

Description (CNA)

A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * before 3.7.2; affected 4.0.0 before 4.1.0

CWE

CWE-125

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjhx-rrh4-j8mx

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.