CVE-2023-4257

Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.

• CWE-120
• CWE-131
• CWE-131

• http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Nov/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/07/1Mailing List
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5jExploit, Vendor Advisory
• http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Nov/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/07/1Mailing List
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5jExploit, Vendor Advisory

Published

Oct 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42564Improper access control in knoxcustom service prior to SMR D…5.5
• CVE-2023-42565Improper input validation vulnerability in Smart Clip prior …6.7
• CVE-2023-42566Out-of-bound write vulnerability in libsavsvc prior to SMR D…7.8
• CVE-2023-42567Improper size check vulnerability in softsimd prior to SMR D…7.8
• CVE-2023-42568Improper access control vulnerability in SmartManagerCN prio…4.4
• CVE-2023-42569Improper authorization verification vulnerability in AR Emoj…3.3
• CVE-2023-42570Improper access control vulnerability in KnoxCustomManagerSe…3.3
• CVE-2023-42571Abuse of remote unlock in Find My Mobile prior to version 7.…6.8
• CVE-2023-42572Implicit intent hijacking vulnerability in Samsung Account W…5.5
• CVE-2023-42573PendingIntent hijacking vulnerability in Search Widget prior…5.5
• CVE-2023-42574Improper access control vulnerablility in GameHomeCN prior t…7.8
• CVE-2023-42575Improper Authentication vulnerability in Samsung Pass prior …6.8