CVE-2025-1675: Out of bounds read in dns_copy_qname
The function dnscopyqname in dnspack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1675?
CVE-2025-1675 has been classified with a high severity due to the risk associated with the potential for buffer overflow.
How do I fix CVE-2025-1675?
To fix CVE-2025-1675, ensure you are using a patched version of the Zephyr Project software that addresses the vulnerability.
What systems are affected by CVE-2025-1675?
CVE-2025-1675 affects versions of the Zephyr Project software up to and including version 4.0.0.
What is the impact of CVE-2025-1675?
The impact of CVE-2025-1675 includes potential arbitrary code execution due to improper handling of untrusted input.
Is there a public exploit for CVE-2025-1675?
As of now, there is no publicly known exploit for CVE-2025-1675, but it is important to apply updates to mitigate risk.