diff --git a/doc/security/vulnerabilities.rst b/doc/security/vulnerabilities.rst index 374e21d5c91..1217b1db70d 100644 --- a/doc/security/vulnerabilities.rst +++ b/doc/security/vulnerabilities.rst @@ -1881,3 +1881,26 @@ This has been fixed in main for v4.1.0 - `PR 82288 fix for 3.7 `_ + +:cve:`2025-1675` +---------------- + +Out of bounds read in dns_copy_qname + +The function dns_copy_qname in dns_pack.c performs performs a memcpy operation +with an untrusted field and does not check if the source buffer is large enough +to contain the copied data. + +- `Zephyr project bug tracker GHSA-2m84-5hfw-m8v4 + `_ + +This has been fixed in main for v4.1.0 + +- `PR 82072 fix for main + `_ + +- `PR 82289 fix for 4.0 + `_ + +- `PR 82288 fix for 3.7 + `_