점검 대응긴급KEV 미등록
CVE-2026-5067
zephyrproject-rtos Zephyr, zephyr 취약점
A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header parser copies the header into a fixed-size buffer using a bounded copy that does not guarantee NUL termination when the input length reaches the buffer size. During upgrade handling the buffer is copied to a local stack buffer and passed to strlen(); if no NUL exists in-bounds, strlen() reads beyond the stack buffer and subsequent concatenation with the WebSocket magic string can write out of bounds. This leads to ou...
- 대응 우선순위
- 점검
- CVSS
- 9.8
- EPSS
- 0.64% 백분위 47.1% · 2026.07.29 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.09