CVE-2023-4257 Unchecked user input length in the Zephyr WiFi shell module

Unchecked user input length in /subsys/net/l2/wifi/wifishell.c can cause buffer overflows...

CVE-2023-4257

CVE-2023-4257 affects Zephyr RTOS, specifically the wifi shell module located at /subsys/net/l2/wifi/wifi_shell.c. The root cause is an unchecked user input length in the wifi shell parsing path (notably __wifi_args_to_params), which can lead to a buffer overflow. Documented impacts include memor...

CVE-2023-4257 Unchecked user input length in the Zephyr WiFi shell module

Unchecked user input length in /subsys/net/l2/wifi/wifishell.c can cause buffer overflows...