NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in `rt_copy_memory`, which unconditionally wrote a null terminator at `dst[len]`. When `len` equals the size of the destination buffer (256 bytes), that extra `'\0'` write overruns the buffer by one byte. To avoid breaking existing callers or changing the public API, the patch in commit fb7b7f658327f659c6a6da1af151cb389c2ca4ee takes a minimal approach: it simply removes the overflow-causing line without adding bounds checks or altering the function signature.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Mon, 02 Jun 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 02 Jun 2025 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in `rt_copy_memory`, which unconditionally wrote a null terminator at `dst[len]`. When `len` equals the size of the destination buffer (256 bytes), that extra `'\0'` write overruns the buffer by one byte. To avoid breaking existing callers or changing the public API, the patch in commit fb7b7f658327f659c6a6da1af151cb389c2ca4ee takes a minimal approach: it simply removes the overflow-causing line without adding bounds checks or altering the function signature. | |
| Title | NeKernel has Heap Overflow in `rt_copy_memory` | |
| Weaknesses | CWE-122 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2025-06-02T11:21:48.580Z
Updated: 2025-06-02T16:39:42.539Z
Reserved: 2025-05-29T16:34:07.173Z
Link: CVE-2025-48990
Vulnrichment
Updated: 2025-06-02T16:30:56.822Z
NVD
Status : Awaiting Analysis
Published: 2025-06-02T12:15:25.997
Modified: 2025-06-02T17:32:17.397
Link: CVE-2025-48990
Redhat
No data.