Skip to contentZephyrproject-rtos Zephyr vulnerabilities
- zephyrproject zephyrOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningCVE-2022-10418.2 High
- zephyrproject zephyrL2CAP: Information leakage in le_ecred_conn_req()CVE-2021-34354.0 Medium
- zephyrproject zephyrL2CAP: Stack based buffer overflow in le_ecred_conn_req()CVE-2021-34344.9 Medium
- zephyrproject zephyrBT: Invalid channel map in CONNECT_IND results to DeadlockCVE-2021-34334.0 Medium
- zephyrproject zephyrBT: Invalid interval in CONNECT_IND leads to Division by ZeroCVE-2021-34324.3 Medium
- zephyrproject zephyrBT: Assertion failure on repeated LL_FEATURE_REQCVE-2021-34314.3 Medium
- zephyrproject zephyrBT: Assertion failure on repeated LL_CONNECTION_PARAM_REQCVE-2021-34306.5 Medium
- zephyrproject zephyrThe RNDIS USB device class includes a buffer overflow vulnerabilityCVE-2021-38618.2 High
- zephyrproject zephyrBuffer overflow in usb device classCVE-2021-38358.2 High
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failureCVE-2021-34544.3 Medium
- zephyrproject zephyrDisconnecting L2CAP channel right after invalid ATT request leads freezeCVE-2021-34554.3 Medium
- zephyrproject zephyrRCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in ZephyrCVE-2021-33307.1 High
- zephyrproject zephyrInteger Underflow in 6LoWPAN IPHC Header Uncompression in ZephyrCVE-2021-33238.3 High
- zephyrproject zephyrUnexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in ZephyrCVE-2021-33226.5 Medium
- zephyrproject zephyrInteger Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header RemovalCVE-2021-33217.5 High
- zephyrproject zephyrBuffer overflow in Zephyr USB DFU DNLOADCVE-2021-3625Public exploit9.6 Critical
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyrCVE-2021-35817.0 High
- zephyrproject zephyrZephyr JSON decoder incorrectly decodes array of arrayCVE-2021-35107.5 High
- zephyrproject zephyrBT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownCVE-2021-34364.3 Medium
- zephyrproject zephyrDOS: Incorrect 802154 Frame Validation for Omitted Source / Dest AddressesCVE-2021-33196.5 Medium
- zephyrproject zephyrType Confusion in 802154 ACK Frames HandlingCVE-2021-33205.9 Medium
- zephyrproject zephyrInteger Overflow in memory allocating functionsCVE-2020-136036.9 Medium
- zephyrproject zephyrRemote Denial of Service in LwM2M do_write_op_tlvCVE-2020-136024.0 Medium
- zephyrproject zephyrPossible read out of bounds in dns readCVE-2020-136019.0 Critical
- zephyrproject zephyrMalformed SPI in response for eswifi can corrupt kernel memoryCVE-2020-136007.0 High
- zephyrproject zephyrSecurity problem with settings and littlefsCVE-2020-135993.3 Low
- zephyrproject zephyrFS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_statCVE-2020-135986.3 Medium
- zephyrproject zephyrImproper Handling of Insufficient Permissions or Privileges in zephyrCVE-2020-100725.9 Medium
- zephyrproject zephyrZephyr Bluetooth unchecked packet data results in denial of serviceCVE-2020-100694.3 Medium
- zephyrproject zephyrIncorrect Error Handling in Bluetooth HCI coreCVE-2020-100662.5 Low
- zephyrproject zephyrMissing Size Checks in Bluetooth HCI over SPICVE-2020-100653.8 Low
- zephyrproject zephyrImproper Input Frame Validation in ieee802154 ProcessingCVE-2020-100648.3 High
- zephyrproject zephyrInsufficient publish message length validation in MQTTCVE-2020-100719.0 Critical
- zephyrproject zephyrMQTT buffer overflow on receive bufferCVE-2020-100709.0 Critical
- zephyrproject zephyrZephyr Bluetooth DLE duplicate requests vulnerabilityCVE-2020-100685.1 Medium
- zephyrproject zephyrRemote Denial of Service in CoAP Option Parsing Due To Integer OverflowCVE-2020-100636.8 Medium
- zephyrproject zephyrPacket length decoding error in MQTTCVE-2020-100629.0 Critical
- zephyrproject zephyrError handling invalid packet sequenceCVE-2020-100618.1 High
- zephyrproject zephyrInteger Overflow In is_in_region Allows User Thread To Access Kernel MemoryCVE-2020-100677.5 High
- zephyrproject zephyrUpdateHub Might Dereference An Uninitialized PointerCVE-2020-100608.0 High
- zephyrproject zephyrUpdateHub Module Explicitly Disables TLS VerificationCVE-2020-100594.8 Medium
- zephyrproject zephyrMultiple Syscalls In kscan Subsystem Performs No Argument ValidationCVE-2020-100587.8 High
- zephyrproject zephyrMultiple Syscalls In GPIO Subsystem Performs No Argument ValidationCVE-2020-100287.8 High
- zephyrproject zephyrARC Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100277.8 High
- zephyrproject zephyrARM Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100247.8 High
- zephyrproject zephyrShell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trimCVE-2020-100236.9 Medium
- zephyrproject zephyrUpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size ArrayCVE-2020-100229.0 Critical
- zephyrproject zephyrOut-of-bounds write in USB Mass Storage with unaligned sizesCVE-2020-100218.1 High
- zephyrproject zephyrBuffer Overflow in USB DFU requested lengthCVE-2020-100198.1 High