CVE-2023-4260 — Classic Buffer Overflow in Zephyr

CWE-120 — Classic Buffer OverflowCWE-193 — Off-by-one Error2 documents2 sources
Severity
10.0CRITICALNVD
CNA6.3
EPSS
0.3%
top 50.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Zephyrproject-rtos ZephyrZephyrproject Zephyr
Timeline
Latest updateSep 26
PublishedSep 27

Description

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0

Affected Packages2 packages

🔴Vulnerability Details

1
CVEList
Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem↗2023-09-26
▶
CVE-2023-4260 — Classic Buffer Overflow in Zephyr | cvebase