CVE-2026-10773 | ZephyrProject Zephyr up to 4.4.x DHCPv4 Client Helper dhcpv4.c net_dhcpv4_msg_type_name msg_type out-of-bounds

A vulnerability was found in ZephyrProject Zephyr up to 4.4.x. It has been classified as critical. Affected by this issue is the function net_dhcpv4_msg_type_name of the file subsys/net/lib/dhcpv4/dhcpv4.c of the component DHCPv4 Client Helper. This manipulation of the argument msg_type causes out-of-bounds read. This vulnerability appears as CVE-2026-10773. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.