CVE-2025-1675 is a critical vulnerability affecting the Zephyr Project's dns_pack.c, where the dns_copy_qname function performs an unchecked memcpy operation, potentially leading to out-of-bounds read issues. With a CVSS score of 9.1, this vulnerability is remotely exploitable with low complexity and no user interaction, allowing for high confidentiality and availability impacts. While currently not actively exploited and lacking public exploit code, its high FAUCET Risk Score of 85/100 indicates significant potential danger, despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 4.0.0CPE matchmatch criteria | cpe:2.3:o:zephyrproject:zephyr:*:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.