Skip to contentZephyrproject Zephyr vulnerabilities
- zephyrproject zephyrBluetooth: ASCS Unchecked tailroom of the response bufferCVE-2024-64426.3 Medium
- zephyrproject zephyrBT: HCI: adv_ext_report Improper discarding in adv_ext_reportCVE-2024-62597.6 High
- zephyrproject zephyrBT: Classic: SDP OOB access in get_att_search_listCVE-2024-61377.6 High
- zephyrproject zephyrBT: Unchecked user input in bap_broadcast_assistantCVE-2024-59316.3 Medium
- zephyrproject zephyrBT: Missing length checks of net_buf in rfcomm_handle_dataCVE-2024-62586.8 Medium
- zephyrproject zephyrBT: Encryption procedure host vulnerabilityCVE-2024-57548.2 High
- zephyrproject zephyrBT:Classic: Multiple missing buf length checksCVE-2024-61357.6 High
- zephyrproject zephyrBT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by ZeroCVE-2024-47857.6 High
- zephyrproject zephyrbt: host/smp: DoS caused by null pointer dereferenceCVE-2024-33326.5 Medium
- zephyrproject zephyrBluetooth: integer underflow in gatt_find_info_rspCVE-2024-30776.8 Medium
- zephyrproject zephyrMissing Security Control in Zephyr OS IP Packet HandlingCVE-2023-70608.6 High
- zephyrproject zephyrfs: fuse: buffer overflow vulnerability in the Zephyr FSCVE-2023-68817.3 High
- zephyrproject zephyrBluetooth characteristic LESC security requirement not enforced without additional flagsCVE-2024-16388.2 High
- zephyrproject zephyrcan: out of bounds in remove_rx_filter functionCVE-2023-57794.4 Medium
- zephyrproject zephyripm: signed to unsigned conversion problem in esp32_ipm_sendCVE-2023-62498.0 High
- zephyrproject zephyrUnchecked user input length in the Zephyr Settings ShellCVE-2023-67498.0 High
- zephyrproject zephyrL2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()CVE-2023-50558.3 High
- zephyrproject zephyrbt: hci: DoS and possible RCECVE-2023-44248.3 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr STM32 Crypto driverCVE-2023-51394.4 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemCVE-2023-57536.3 Medium
- zephyrproject zephyrUnchecked user input length in the Zephyr WiFi shell moduleCVE-2023-42577.6 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driverCVE-2023-42637.6 High
- zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, ca…CVE-2023-55637.1 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr CANbus subsystemCVE-2023-37257.6 High
- zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driverCVE-2023-51847.0 High
- zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystemCVE-2023-42606.3 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemCVE-2023-42647.1 High
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driverCVE-2023-42597.1 High
- zephyrproject zephyrbt: mesh: vulnerability in provisioning protocol implementation on provisionee sideCVE-2023-42588.6 High
- zephyrproject zephyrBuffer overflow in Zephyr USBCVE-2023-42656.4 Medium
- zephyrproject zephyrHCI send_sync Dangling Semaphore Reference Re-useCVE-2023-19015.9 Medium
- zephyrproject zephyrBT HCI host union variant confusionCVE-2023-22346.8 Medium
- zephyrproject zephyrHCI Connection Creation Dangling State Reference Re-useCVE-2023-19025.9 Medium
- zephyrproject zephyripv6: Missing ipv6 nullptr-check in handle_ra_inputCVE-2023-03595.9 Medium
- zephyrproject zephyrnet: shell: Improper input validationCVE-2023-07796.7 Medium
- zephyrproject zephyrDOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layerCVE-2021-33299.6 Critical
- zephyrproject zephyrDoS: Invalid Initialization in le_read_buffer_size_completeCVE-2023-03979.6 Critical
- zephyrproject zephyrBuffer Overreads in Bluetooth HCICVE-2023-03966.8 Medium
- zephyrproject zephyrBluetooth HCI Error Handling Double FreeCVE-2022-38069.8 Critical
- zephyrproject zephyrPossible to retrieve uncrypted firmware imageCVE-2022-05536.5 Medium
- zephyrproject zephyrUsb bluetooth device ACL read cb buffer overflowCVE-2021-39669.6 Critical
- zephyrproject zephyrbt: host: Wrong key validation checkCVE-2022-29938.6 High
- zephyrproject zephyrcan: denial-of-service can be triggered by a crafted CAN frameCVE-2022-27418.2 High
- zephyrproject zephyrOut-of-bound write in tcp_flagsCVE-2022-18417.2 High
- zephyrproject zephyrOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningCVE-2022-10428.2 High
- zephyrproject zephyrOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningCVE-2022-10418.2 High
- zephyrproject zephyrL2CAP: Information leakage in le_ecred_conn_req()CVE-2021-34354.0 Medium
- zephyrproject zephyrL2CAP: Stack based buffer overflow in le_ecred_conn_req()CVE-2021-34344.9 Medium
- zephyrproject zephyrBT: Invalid channel map in CONNECT_IND results to DeadlockCVE-2021-34334.0 Medium
- zephyrproject zephyrBT: Invalid interval in CONNECT_IND leads to Division by ZeroCVE-2021-34324.3 Medium
- Show moreLoading…