A critical memory corruption vulnerability in the Zephyr RTOS HL7800 driver could allow adjacent attackers to trigger system instability or execute arbitrary code.

This is a buffer overflow vulnerability (CWE-787) located in the on_cmd_atcmdinfo_ipaddr function. The vulnerability is exploitable by an adjacent attacker (someone on the same network segment) who does not require prior authentication.

The potential for memory corruption in an RTOS environment often results in a complete system crash or arbitrary code execution, which can disrupt critical embedded operations. With a CVSS score of 8.8, this vulnerability represents a high-risk vector for devices utilizing the HL7800 modem driver.

Immediate Action: Update the Zephyr project codebase to a version that includes the fix provided in commit a1cbced64181bc0bdf95e1fd7118f2bb70cf679b.

Proactive Monitoring: Monitor network traffic directed toward the modem interface for malformed AT command responses or unexpected communication patterns.

Compensating Controls: If immediate patching is not possible, isolate affected devices from untrusted network segments to mitigate the risk of adjacent exploitation.

Public Exploit Available: Unknown

Given the potential for remote code execution in embedded systems, this update should be treated with high urgency. Developers must integrate the provided security patch into their firmware build pipeline immediately to secure the device communication stack.