CVE-2021-3330

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
12/10/2021
Last modified:
18/10/2021

Description

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:* 2.4.0 (including) 2.5.0 (excluding)