Description
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zephyrproject-rtos | Zephyr | — | — |
High · 8.2
CVE-2025-1673
EUVD-2025-5069
Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
Published Feb 25, 2025 · Updated Oct 13, 2026 · Assigned by zephyr