CVEvulnerability

CVE-2023-0779

7.7 HIGH Published 2023-05-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Weaknesses
CWE-20, CWE-476

Description

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

Affected configurations

• zephyrproject zephyr (<= 3.2.0)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-476 NULL Pointer Dereference weakness

References