CVE-2025-51823: Libcsp

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length.

Affected products

• Libcsp Libcsp: version 2.0 only

Published 2025-08-11. Last modified 2026-06-17.