CVE-2023-4259 - Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

HIGH

Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

Published Sep 25, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.83%

Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
1.14	affected	<3.4

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-193

Link	Providers	Tags
http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html		Third Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/1		Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2023/11/07/1		Mailing List
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54130		Advisory
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gghm-c696-f4j4		ExploitVendor Advisory