Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-1673

Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zephyr

Description

A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos Zephyr

Default version status: unaffected

  • * to < 3.7.2affected
  • 4.0.0 to < 4.1.0affected

References