CVE-2026-0849

Published: Mar 16, 2026Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution.

Affected (4)

Products: Zephyrproject: Zephyr

Zephyrproject

1 product

Zephyr

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Zephyrproject Zephyr	Version 4.3.0
Zephyrproject Zephyr	Version 4.3.0 rc1
Zephyrproject Zephyr	Version 4.3.0 rc2
Zephyrproject Zephyr	Version 4.3.0 rc3

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-ff4p-3ggg-prp6

Source: vulnerabilities@zephyrproject.org

ExploitPatchVendor Advisory

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-ff4p-3ggg-prp6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitPatchVendor Advisory

Timeline

No history available yet.