CVE Feed

    Dashboard / CVE / CVE-2023-4259

    CVE-2023-4259

    Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.

    Published:Sep 25, 2023
    Last Modified:Feb 13, 2025
    EPS:Sep 25, 2023
    EPSS Score:0.00174
    CVSS Score:7.1

    Affected Products

    Vendor
    Zephyrproject
    Product
    Zephyr

    Exploits

    https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gghm-c696-f4j4https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gghm-c696-f4j4

    Related CVEs

    CVE-2026-15461 (CVSS 5.3) — The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl7…
    CVE-2026-15460 (CVSS 5.4) — The Bluetooth Classic (BR/EDR) L2CAP receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap…
    CVE-2026-14697 (CVSS 6.5) — net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When …
    CVE-2026-14696 (CVSS 6.5) — When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/et…
    CVE-2026-14368 (CVSS 5.4) — The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON s…
    CVE-2026-14367 (CVSS 3.1) — The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-…
    CVE-2026-14366 (CVSS 6.4) — The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c…
    CVE-2026-13735 (CVSS 3.7) — Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c mishandled keepalive packets. In wg_…
    CVE-2026-13734 (CVSS 6.5) — Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_cry…
    CVE-2026-13481 (CVSS 5.4) — The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME managemen…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High