CVE-2025-9558
BaseFortify
Publication date: 2025-11-26
Last updated on: 2025-11-26
Assigner: Zephyr Project
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zephyrproject | zephyr | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential Out-Of-Bounds (OOB) Write in the gen_prov_start function within the pb_adv.c file. It occurs because the full length of received data is copied into the link.rx.buf receiver buffer without checking if the data size fits, which can lead to writing outside the allocated buffer boundaries.
How can this vulnerability impact me? :
The vulnerability can lead to memory corruption due to out-of-bounds writes, which may cause application crashes, data corruption, or potentially allow an attacker to execute arbitrary code. According to the CVSS score, it has a high impact on availability and low impact on confidentiality and integrity.