CVE-2026-87042 | Zephyr Project up to 4.3.1/4.4.x PTP Port Implementation port.c port_delay_resp_msg_process logMessageInterval integer overflow

November 10, 2026 Yanac

A vulnerability categorized as critical has been discovered in Zephyr Project Zephyr up to 4.3.1/4.4.x. Affected is the function port_delay_resp_msg_process of the file subsys/net/lib/ptp/port.c of the component PTP Port Implementation. Such manipulation of the argument logMessageInterval leads to integer overflow.

This vulnerability is referenced as CVE-2026-87042. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More