CVE-2026-10643 – Out-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)

CVE ID :CVE-2026-10643

Published : June 27, 2026, 10:59 p.m. | 46 minutes ago

Description :Zephyr’s IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the payload length (msg-msg_controllen
Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…