CVE-2024-6443
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 4, 2024
Updated: Nov 12, 2024
CWE ID 125
CWE ID 787
Summary
CVE-2024-6443 is a vulnerability affecting the Zephyr operating system's utf8.c file in the utils directory. The issue lies within the utf8_trunc function where the last_byte_p pointer may point to a byte preceding the string pointer when the string is empty. This inconsistency could lead to potential buffer overflows and unintended execution of code. Attackers may exploit this flaw to gain unauthorized access or crash the system. Users are recommended to apply the necessary patches or updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Zephyrproject Zephyr
Affected Vendors
- Zephyr Project