CVE-2023-0359

Summary

A missing nullptr-check in handle_ra_input can cause a nullptr-deref.

Affected Software

VendorProductVersion RangeStatus
zephyrproject-rtosZephyr* <= 3.2affected
zephyrproject-rtosZephyr* <= 2.7.4affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References