Base Score

HIGH7.6

CVE-2025-10458

Parameters are not validated or sanitized, and are later used in various internal operations.

VectorADJACENT_NETWORK

Published Byvulnerabilities@zephyrproject.org

Published DateSep 19, 2025, 06:15

Weakness Type (CWE):CWE-130

CVSS Metrics

Base Score

7.6

Vector String

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

ADJACENT_NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

HIGH

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vmww-237q-2fwp

Base Score

HIGH7.6

Weakness Type (CWE):CWE-130

CVSS Metrics

Base Score

7.6

Vector String

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

ADJACENT_NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

HIGH