CVE-2026-18418 | Zephyr Project up to 4.4.1 Zbus Proxy Agent IPC Backend zbus_proxy_agent_ipc.c zbus_proxy_agent_receive_cb channel_name_len out-of-bounds

SecurityVulns
Yanac

A vulnerability was found in Zephyr Project Zephyr up to 4.4.1 and classified as problematic. The impacted element is the function zbus_proxy_agent_receive_cb of the file subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c of the component Zbus Proxy Agent IPC Backend. The manipulation of the argument channel_name_len results in out-of-bounds read.

This vulnerability is reported as CVE-2026-18418. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More