CVE-2025-9557

Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont PUBLISHED

Description (CNA)

‭An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to‬ ‭a crash and a resultant denial of service.‬

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * before 4.2.2

CWE

CWE-120

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r3j3-c5v7-2ppf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.