CVE-2023-6249: ipm: signed to unsigned conversion problem in esp32_ipm_send
Published Feb 18, 2024
·Updated
Signed to unsigned conversion esp32ipmsend
Affected Software
5 affected components
zephyrproject zephyr<3.5.0
zephyrproject zephyr=3.5.0
zephyrproject zephyr=3.5.0-rc1
zephyrproject zephyr=3.5.0-rc2
zephyrproject zephyr=3.5.0-rc3
Remediation
Event History
Feb 18, 2024
CVE Published
via MITRE·07:27 AM
Data Sourced
via MITRE·07:27 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-6249?
CVE-2023-6249 carries a high severity rating due to the potential for signed to unsigned conversion vulnerabilities leading to unexpected behavior.
2
How do I fix CVE-2023-6249?
To fix CVE-2023-6249, update your Zephyr Project software to a version above 3.5.0.
3
Which versions of Zephyr are affected by CVE-2023-6249?
CVE-2023-6249 affects Zephyr versions up to and including 3.5.0 and its release candidates 3.5.0-rc1, 3.5.0-rc2, and 3.5.0-rc3.
4
What causes CVE-2023-6249?
CVE-2023-6249 is caused by a vulnerability in the esp32_ipm_send function that allows signed to unsigned conversion.
5
What impacts does CVE-2023-6249 have on applications?
CVE-2023-6249 can lead to compromised data integrity and system stability in affected applications.