CVE-2025-1675

High

Description

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

SeverityHigh

CVSS8.2

Exploit probability—

ProductZephyr

PublishedFeb 25, 2025

First seenFeb 25, 2025

Weakness typeCWE-125Out-of-bounds read

How to fix

Update

zephyrproject zephyr3.7.2, 4.1.0 or later

Patches

github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4

Affected products

Product	Affected versions	Fixed in
zephyrproject zephyr	v ≤ 4.0.0, v < 3.7.2, 4.0.0 ≤ v < 4.1.0	3.7.2, 4.1.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.