CVE-2020-10064: 
NixOS vulnerability analysis and mitigation

CVE-2020-10064 is a vulnerability affecting Zephyr versions >= v1.14.2 and >= v2.2.0, discovered in the ieee802154 processing component. The vulnerability was disclosed in early 2020 and involves improper input frame validation that can lead to stack-based and heap-based buffer overflows (Zephyr Advisory).

The vulnerability stems from an underflow condition in packet buffer size handling for small ieee802154 packets. The issue occurs in the ieee802154recv function where manual computation of size is performed after minimal size validation in ieee802154validateframe. The size check for minimal packet size (IEEE802154MINLENGTH == 3) fails to account for additional sizes introduced by PAN id and extended source/destination addresses. This can result in out-of-bounds access in the uncompressIPHC_header function (Zephyr Advisory).

When exploited, this vulnerability can lead to Denial of Service (DoS) at minimum. For systems with larger RAM (>64kB), the vulnerability could potentially be exploited for Remote Code Execution (RCE) depending on timing conditions during memory operations (Zephyr Advisory).

The vulnerability has been patched in Zephyr version v2.3.0. Fixes were implemented through pull request #24971 for the master branch and #33451 for the v1.14-branch (Zephyr Advisory).