CVE-2026-1679: Zephyr: arabellek taşması

Açıklama (NVD)

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send API; no remote attacker can reach it directly.

Özet bilgiler

Ürün

Zephyrproject Zephyr

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,22 (yüzdelik 12)

CWE

CWE-120

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-120