medium6.5
CVE-2025-51823
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter.
Impact
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libcsp | Libcsp | Version 2.0 |