CNNVD-202511-2898 Information

CNNVD ID

CNNVD-202511-2898

CVE-2025-9557

  • CNNVD Published: 2025-11-26

Description (Chinese)

Zephyr是Zephyr开源的一个可扩展的实时操作系统 (RTOS)。 Zephyr存在安全漏洞,该漏洞源于越界写入可能导致执行任意代码或拒绝服务攻击。

Description (English)

Zephyr is an extended real-time operating system (RTOS) from Zephyr open source. Zephyr had a security loophole, which stemmed from cross-border writing that could lead to arbitrary code or denial of service attacks.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Zephyr

Published

2025-11-26

Last Modified

2026-02-24

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r3j3-c5v7-2ppf https://access.redhat.com/security/cve/cve-2025-9557

Patch

https://github.com/zephyrproject-rtos/zephyr/releases

Share on: