CVE-2023-5139 MEDIUM

CVE-2023-5139: Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Vendor Zephyrproject-Rtos

Product Zephyr

Weakness CWE-120

Published October 26, 2023

Last update February 13, 2025

CVSS base score

4.4/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver

Key dates

October 26, 2023 CVE published

February 13, 2025 Record updated

External resources

Related vulnerabilities