Skip to contentZephyrproject-rtos vulnerabilities
Newest
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyrCVE-2021-35817.0 High
- zephyrproject zephyrZephyr JSON decoder incorrectly decodes array of arrayCVE-2021-35107.5 High
- zephyrproject zephyrBT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownCVE-2021-34364.3 Medium
- zephyrproject zephyrDOS: Incorrect 802154 Frame Validation for Omitted Source / Dest AddressesCVE-2021-33196.5 Medium
- zephyrproject zephyrType Confusion in 802154 ACK Frames HandlingCVE-2021-33205.9 Medium
- zephyrproject zephyrInteger Overflow in memory allocating functionsCVE-2020-136036.9 Medium
- zephyrproject zephyrRemote Denial of Service in LwM2M do_write_op_tlvCVE-2020-136024.0 Medium
- zephyrproject zephyrPossible read out of bounds in dns readCVE-2020-136019.0 Critical
- zephyrproject zephyrMalformed SPI in response for eswifi can corrupt kernel memoryCVE-2020-136007.0 High
- zephyrproject zephyrSecurity problem with settings and littlefsCVE-2020-135993.3 Low
- zephyrproject zephyrFS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_statCVE-2020-135986.3 Medium
- zephyrproject zephyrImproper Handling of Insufficient Permissions or Privileges in zephyrCVE-2020-100725.9 Medium
- zephyrproject zephyrZephyr Bluetooth unchecked packet data results in denial of serviceCVE-2020-100694.3 Medium
- zephyrproject zephyrIncorrect Error Handling in Bluetooth HCI coreCVE-2020-100662.5 Low
- zephyrproject zephyrMissing Size Checks in Bluetooth HCI over SPICVE-2020-100653.8 Low
- zephyrproject zephyrImproper Input Frame Validation in ieee802154 ProcessingCVE-2020-100648.3 High
- zephyrproject zephyrInsufficient publish message length validation in MQTTCVE-2020-100719.0 Critical
- zephyrproject zephyrMQTT buffer overflow on receive bufferCVE-2020-100709.0 Critical
- zephyrproject zephyrZephyr Bluetooth DLE duplicate requests vulnerabilityCVE-2020-100685.1 Medium
- zephyrproject zephyrRemote Denial of Service in CoAP Option Parsing Due To Integer OverflowCVE-2020-100636.8 Medium
- zephyrproject zephyrPacket length decoding error in MQTTCVE-2020-100629.0 Critical
- zephyrproject zephyrError handling invalid packet sequenceCVE-2020-100618.1 High
- zephyrproject zephyrInteger Overflow In is_in_region Allows User Thread To Access Kernel MemoryCVE-2020-100677.5 High
- zephyrproject zephyrUpdateHub Might Dereference An Uninitialized PointerCVE-2020-100608.0 High
- zephyrproject zephyrUpdateHub Module Explicitly Disables TLS VerificationCVE-2020-100594.8 Medium
- zephyrproject zephyrMultiple Syscalls In kscan Subsystem Performs No Argument ValidationCVE-2020-100587.8 High
- zephyrproject zephyrMultiple Syscalls In GPIO Subsystem Performs No Argument ValidationCVE-2020-100287.8 High
- zephyrproject zephyrARC Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100277.8 High
- zephyrproject zephyrARM Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100247.8 High
- zephyrproject zephyrShell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trimCVE-2020-100236.9 Medium
- zephyrproject zephyrUpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size ArrayCVE-2020-100229.0 Critical
- zephyrproject zephyrOut-of-bounds write in USB Mass Storage with unaligned sizesCVE-2020-100218.1 High
- zephyrproject zephyrBuffer Overflow in USB DFU requested lengthCVE-2020-100198.1 High