CVE-2025-1675 HIGH

CVE-2025-1675: Out of bounds read in dns_copy_qname

Vendor Zephyrproject-Rtos
Product Zephyr
Weakness CWE-125
Published February 25, 2025
Last update February 28, 2025
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

What the vulnerability does

01Description

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Key dates

02Disclosure timeline

February 25, 2025 CVE published
February 28, 2025 Record updated