CVE-2023-4264 — Classic Buffer Overflow in Zephyr

CWE-120 — Classic Buffer OverflowCWE-121 — Stack-based Buffer OverflowCWE-122 — Heap-based Buffer Overflow2 documents2 sources
Severity
9.6CRITICALNVD
CNA7.1
EPSS
0.2%
top 54.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Zephyrproject-rtos ZephyrZephyrproject Zephyr
Timeline
Latest updateSep 26
PublishedSep 27

Description

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 2.8 | Impact: 6.0

Affected Packages2 packages

🔴Vulnerability Details

1
CVEList
Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem↗2023-09-26
▶
CVE-2023-4264 — Classic Buffer Overflow in Zephyr | cvebase