PT-2025-48129 · Pb Adv.C · Pb Adv.C

Published 2025-11-26 · Updated 2025-12-01 · CVE-2025-9558

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2025-9558

Description A potential out-of-bounds write issue exists in the gen prov start function within the pb adv.c file. The issue occurs because the full length of received data is copied into the link.rx.buf receiver buffer without any size validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-9558

GHSA-8WVR-688X-68VR

Affected Products

Pb Adv.C

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-9558 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9558 · Vendor Advisory
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8wvr-688x-68vr · Note
• https://t.me/CVEtracker/38279 · Telegram Post
• https://twitter.com/CVEnew/status/1993558232971837732 · Twitter Post
• https://twitter.com/cracbot/status/1995447844124442778 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1993609245539869104 · Twitter Post