Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver
CVE-2023-5139

4.4MEDIUM

Key Information:

Vendor

Zephyrproject-rtos

Status
Zephyr
Vendor
CVE Published:
26 October 2023

What is CVE-2023-5139?

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver

Affected Version(s)

Zephyr * < 3.5

References

https://github.com/zephyrproject-rtos/zephyr/security/adv...
http://www.openwall.com/lists/oss-security/2023/11/07/1
http://seclists.org/fulldisclosure/2023/Nov/1

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.