CVE-2023-4265

Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841

• CWE-120
• CWE-120

• http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Nov/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/07/1Mailing List
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4vgv-5r6q-r6xhExploit, Vendor Advisory
• http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Nov/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/07/1Mailing List
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4vgv-5r6q-r6xhExploit, Vendor Advisory

Published

Aug 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42644In dm service, there is a possible missing permission check.…5.5
• CVE-2023-42645In sim service, there is a possible way to write permission …5.5
• CVE-2023-42646In Ifaa service, there is a possible missing permission chec…5.5
• CVE-2023-42647In Ifaa service, there is a possible way to write permission…5.5
• CVE-2023-42648In engineermode, there is a possible missing permission chec…5.5
• CVE-2023-42649In engineermode, there is a possible missing permission chec…5.5
• CVE-2023-42650In engineermode, there is a possible missing permission chec…5.5
• CVE-2023-42651In engineermode, there is a possible missing permission chec…5.5
• CVE-2023-42652In engineermode, there is a possible missing permission chec…5.5
• CVE-2023-42653In faceid service, there is a possible out of bounds write d…5.5
• CVE-2023-42654In dm service, there is a possible missing permission check.…5.5
• CVE-2023-42655In sim service, there is a possible way to write permission …6.7