important · Firmware
A mismatched DNS answer can make Zephyr copy a name beyond sockaddr storage.
Affects
Zephyr RTOS devices built with the native DNS resolver and affected networking code.
A PTR record returned for an A or AAAA query is accepted as NET_AF_LOCAL, and its name length becomes the address-copy length.
Detail and 2 sources
The result is an out-of-bounds copy, but we do not know whether it permits controlled corruption or execution on a shipping device.
The upstream change blocks the type mismatch, but affected and fixed release boundaries remain unestablished in the public record.