Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-1675

Out of bounds read in dns_copy_qname

Description

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos Zephyr

Default version status: unaffected

  • * to < 3.7.2affected
  • 4.0.0 to < 4.1.0affected

References