Skip to contentZephyrproject Zephyr vulnerabilities
- zephyrproject zephyrBT: Assertion failure on repeated LL_FEATURE_REQCVE-2021-34314.3 Medium
- zephyrproject zephyrBT: Assertion failure on repeated LL_CONNECTION_PARAM_REQCVE-2021-34306.5 Medium
- zephyrproject zephyrThe RNDIS USB device class includes a buffer overflow vulnerabilityCVE-2021-38618.2 High
- zephyrproject zephyrBuffer overflow in usb device classCVE-2021-38358.2 High
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failureCVE-2021-34544.3 Medium
- zephyrproject zephyrDisconnecting L2CAP channel right after invalid ATT request leads freezeCVE-2021-34554.3 Medium
- zephyrproject zephyrRCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in ZephyrCVE-2021-33307.1 High
- zephyrproject zephyrInteger Underflow in 6LoWPAN IPHC Header Uncompression in ZephyrCVE-2021-33238.3 High
- zephyrproject zephyrUnexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in ZephyrCVE-2021-33226.5 Medium
- zephyrproject zephyrInteger Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header RemovalCVE-2021-33217.5 High
- zephyrproject zephyrBuffer overflow in Zephyr USB DFU DNLOADCVE-2021-3625Public exploit9.6 Critical
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyrCVE-2021-35817.0 High
- zephyrproject zephyrZephyr JSON decoder incorrectly decodes array of arrayCVE-2021-35107.5 High
- zephyrproject zephyrBT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is knownCVE-2021-34364.3 Medium
- zephyrproject zephyrDOS: Incorrect 802154 Frame Validation for Omitted Source / Dest AddressesCVE-2021-33196.5 Medium
- zephyrproject zephyrType Confusion in 802154 ACK Frames HandlingCVE-2021-33205.9 Medium
- zephyrproject zephyrInteger Overflow in memory allocating functionsCVE-2020-136036.9 Medium
- zephyrproject zephyrRemote Denial of Service in LwM2M do_write_op_tlvCVE-2020-136024.0 Medium
- zephyrproject zephyrPossible read out of bounds in dns readCVE-2020-136019.0 Critical
- zephyrproject zephyrMalformed SPI in response for eswifi can corrupt kernel memoryCVE-2020-136007.0 High
- zephyrproject zephyrSecurity problem with settings and littlefsCVE-2020-135993.3 Low
- zephyrproject zephyrFS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_statCVE-2020-135986.3 Medium
- zephyrproject zephyrImproper Handling of Insufficient Permissions or Privileges in zephyrCVE-2020-100725.9 Medium
- zephyrproject zephyrZephyr Bluetooth unchecked packet data results in denial of serviceCVE-2020-100694.3 Medium
- zephyrproject zephyrIncorrect Error Handling in Bluetooth HCI coreCVE-2020-100662.5 Low
- zephyrproject zephyrMissing Size Checks in Bluetooth HCI over SPICVE-2020-100653.8 Low
- zephyrproject zephyrImproper Input Frame Validation in ieee802154 ProcessingCVE-2020-100648.3 High
- zephyrproject zephyrInsufficient publish message length validation in MQTTCVE-2020-100719.0 Critical
- zephyrproject zephyrMQTT buffer overflow on receive bufferCVE-2020-100709.0 Critical
- zephyrproject zephyrZephyr Bluetooth DLE duplicate requests vulnerabilityCVE-2020-100685.1 Medium
- zephyrproject zephyrRemote Denial of Service in CoAP Option Parsing Due To Integer OverflowCVE-2020-100636.8 Medium
- zephyrproject zephyrPacket length decoding error in MQTTCVE-2020-100629.0 Critical
- zephyrproject zephyrError handling invalid packet sequenceCVE-2020-100618.1 High
- zephyrproject zephyrInteger Overflow In is_in_region Allows User Thread To Access Kernel MemoryCVE-2020-100677.5 High
- zephyrproject zephyrUpdateHub Might Dereference An Uninitialized PointerCVE-2020-100608.0 High
- zephyrproject zephyrUpdateHub Module Explicitly Disables TLS VerificationCVE-2020-100594.8 Medium
- zephyrproject zephyrMultiple Syscalls In kscan Subsystem Performs No Argument ValidationCVE-2020-100587.8 High
- zephyrproject zephyrMultiple Syscalls In GPIO Subsystem Performs No Argument ValidationCVE-2020-100287.8 High
- zephyrproject zephyrARC Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100277.8 High
- zephyrproject zephyrARM Platform Uses Signed Integer Comparison When Validating Syscall NumbersCVE-2020-100247.8 High
- zephyrproject zephyrShell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trimCVE-2020-100236.9 Medium
- zephyrproject zephyrUpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size ArrayCVE-2020-100229.0 Critical
- zephyrproject zephyrOut-of-bounds write in USB Mass Storage with unaligned sizesCVE-2020-100218.1 High
- zephyrproject zephyrBuffer Overflow in USB DFU requested lengthCVE-2020-100198.1 High
- zephyr shell, zephyrproject zephyr +1 moreThe shell DNS command can cause unpredictable results due to misuse of stack variables.CVE-2017-142017.8 High
- zephyr shell, zephyrproject zephyr +1 moreThe shell implementation does not protect against buffer overruns resulting in unpredictable behavior.CVE-2017-142027.8 High
- zephyr getaddrinfo, zephyrproject zephyr +1 moreA buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0...CVE-2017-141999.8 Critical
- zephyrproject zephyrzephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in...CVE-2018-10008009.8 Critical