CVE-2020-13600

Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later Zephyr versions 2.3.0 and later

Description The issue is related to a malformed SPI in response for eswifi, which can corrupt kernel memory. It is described as a Heap-based Buffer Overflow.

Recommendations For Zephyr versions 1.14.2 and later, update to a version that contains a fix for the Heap-based Buffer Overflow issue. For Zephyr versions 2.3.0 and later, update to a version that contains a fix for the Heap-based Buffer Overflow issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.