CVE-2025-1675: Zephyrproject Zephyr

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Affected products

• Zephyrproject Zephyr: up to and including 4.0.0

Published 2025-02-25. Last modified 2026-06-17.