Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2020-10064

Improper Input Frame Validation in ieee802154 Processing

Description

Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos zephyr

  • v1.14.2 to < unspecifiedaffected
  • v2.2.0 to < unspecifiedaffected

References