CVE-2023-4265

MediumCVSS 6.4

Published: 12/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

51th percentile - higher than 51% of all known CVEs

Summary

Potential buffer overflow vulnerabilities exist in several locations within the Zephyr project's source code, particularly in files related to USB handling.

Risk Assessment

Exploitation of these vulnerabilities could lead to unauthorized access to the system or application crashes, posing a threat to the integrity and availability of services.

Recommendation

It is recommended to review and fix the code in the specified locations to minimize the risk of buffer overflow.

Original NVD description (English source)

Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841