PT-2026-58039

Name of the Vulnerable Software and Affected Versions Zephyr versions 3.0.0 through 4.4.0 Description In the subsys/net/lib/lwm2m/lwm2m pull context.c file, the firmware-update Package URI is copied into a fixed static buffer context.uri using memcpy without length validation. Because the source...