Heap Buffer Overflow in DTLS Socket Implementation of Zephyr RTOS

CVE-2026-8718

What is CVE-2026-8718?

A vulnerability in the DTLS socket implementation of Zephyr RTOS allows an unprivileged user to cause a heap buffer overflow. This occurs due to an inadequate size verification of the user-supplied buffer in the tls_opt_dtls_peer_connection_id_value_get() function. When a small optlen is provided for a connected DTLS socket with an enabled Connection ID, it can result in the copying of a remote peer's negotiated DTLS Connection ID into a buffer that does not have sufficient space, potentially leading to arbitrary code execution.

References