This vulnerability arises from improper bounds checking in the TLS session cache handling within Zephyr's network sockets subsystem. Specifically, the memcpy operations in tls_session_store() and tls_session_restore() use the caller-supplied addrlen to copy data into a fixed-size buffer without verifying that addrlen does not exceed the buffer size. Because struct net_sockaddr is opaque and applications can supply an addrlen larger than the buffer (e.g., 128 bytes into a 24-byte buffer), this leads to out-of-bounds memory access. The flaw can cause memory corruption, resulting in crashes or potentially arbitrary code execution.

Exploitation of this vulnerability can cause a denial of service due to crashes from out-of-bounds memory writes. Additionally, it may allow an attacker to execute arbitrary code by corrupting memory. The CVSS score of 6.3 reflects a medium severity with network attack vector, low attack complexity, and requiring low privileges without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor Zephyr project advisories for updates and consider disabling TLS session caching if feasible until a fix is available.