CVE-2025-1675 — Out of bounds read in dns_copy_qname

CVE-2025-1675

Out of bounds read in dns_copy_qname PUBLISHED

Description (CNA)

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * before 3.7.2; affected 4.0.0 before 4.1.0

CWE

CWE-125

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.