CVE-2026-1679 in zephyrproject-rtos Zephyr
Résumé (Anglaise)
The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send API; no remote attacker can reach it directly.
Responsable
zephyr
Réserver
30/01/2026
Divulgation
28/03/2026
Entrées
| Publié | Base | Temp | Vulnérabilité | CWE | Prod | Exp | Con | EPSS | CTI | CVE |
|---|---|---|---|---|---|---|---|---|---|---|
| 28/03/2026 | 6.3 | 6.2 | zephyrproject-rtos Zephyr Eswifi Socket Offload buffer overflow | 120 | Project Management Software | Non défini | Correctif officiel | 0.00035 | 1.49 | CVE-2026-1679 |