Riskcovery

CVE-2023-3725

Potential buffer overflow vulnerability in the Zephyr CANbus subsystem

State
Published
Severity
7.6 High
Published
Oct 6, 2023
Updated
Feb 13, 2025
Reserved
Jul 17, 2023

Read the record on cve.org

Description

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

Scores

CVSSScoreVectorSource
3.17.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hzephyr

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • CWE-121 Stack-based Buffer Overflow A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Affected Products

ProductVersions
Zephyrzephyrproject-rtos
  • 3.4 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.