VULNERABILITY INTELLIGENCE
CVE-2023-0779
CVSS score6.7 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2023-05-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Description
At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.
Weakness classification
- CWE-20: Improper Input Validation
- CWE-476: NULL Pointer Dereference
Primary references
- vulnerabilities@zephyrproject.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory