CVE-2026-126957 | zephyrproject-rtos Zephyr up to 4.4.0 IPv4 ICMP subsys/net/ip/icmpv4.c integer underflow

November 12, 2026 Yanac

A vulnerability labeled as problematic has been found in zephyrproject-rtos Zephyr up to 4.4.0. The affected element is the function icmpv4_update_record_route/icmpv4_update_time_stamp of the file subsys/net/ip/icmpv4.c of the component IPv4 ICMP Handler. Executing a manipulation can lead to integer underflow.

This vulnerability is tracked as CVE-2026-126957. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More