20 matches found
EUVD-2026-50445
In subsys/debug/coredump/coredumpshell.c, printcoredumphdr used the 16-bit tgtcode field of a stored Zephyr coredump header directly as an index into coredumptargetcode2str, a fixed 7-element array of string pointers, with no bounds check. A stored coredump whose tgtcode is = 7 causes an...
3CVSS5.8AI score0.00136EPSS
SaveExploits0References2
20