Skip to contentZephyrproject vulnerabilities
Newest
- zephyrproject zephyrcan: out of bounds in remove_rx_filter functionCVE-2023-57794.4 Medium
- zephyrproject zephyripm: signed to unsigned conversion problem in esp32_ipm_sendCVE-2023-62498.0 High
- zephyrproject zephyrUnchecked user input length in the Zephyr Settings ShellCVE-2023-67498.0 High
- zephyrproject zephyrL2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()CVE-2023-50558.3 High
- zephyrproject zephyrbt: hci: DoS and possible RCECVE-2023-44248.3 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr STM32 Crypto driverCVE-2023-51394.4 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemCVE-2023-57536.3 Medium
- zephyrproject zephyrUnchecked user input length in the Zephyr WiFi shell moduleCVE-2023-42577.6 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driverCVE-2023-42637.6 High
- zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, ca…CVE-2023-55637.1 High
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr CANbus subsystemCVE-2023-37257.6 High
- zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driverCVE-2023-51847.0 High
- zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystemCVE-2023-42606.3 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemCVE-2023-42647.1 High
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driverCVE-2023-42597.1 High
- zephyrproject zephyrbt: mesh: vulnerability in provisioning protocol implementation on provisionee sideCVE-2023-42588.6 High
- zephyrproject zephyrBuffer overflow in Zephyr USBCVE-2023-42656.4 Medium
- zephyrproject zephyrHCI send_sync Dangling Semaphore Reference Re-useCVE-2023-19015.9 Medium
- zephyrproject zephyrBT HCI host union variant confusionCVE-2023-22346.8 Medium
- zephyrproject zephyrHCI Connection Creation Dangling State Reference Re-useCVE-2023-19025.9 Medium
- zephyrproject zephyripv6: Missing ipv6 nullptr-check in handle_ra_inputCVE-2023-03595.9 Medium
- zephyrproject zephyrnet: shell: Improper input validationCVE-2023-07796.7 Medium
- zephyrproject zephyrDOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layerCVE-2021-33299.6 Critical
- zephyrproject zephyrDoS: Invalid Initialization in le_read_buffer_size_completeCVE-2023-03979.6 Critical
- zephyrproject zephyrBuffer Overreads in Bluetooth HCICVE-2023-03966.8 Medium
- zephyrproject zephyrBluetooth HCI Error Handling Double FreeCVE-2022-38069.8 Critical
- zephyrproject zephyrPossible to retrieve uncrypted firmware imageCVE-2022-05536.5 Medium
- zephyrproject zephyrUsb bluetooth device ACL read cb buffer overflowCVE-2021-39669.6 Critical
- zephyrproject zephyrbt: host: Wrong key validation checkCVE-2022-29938.6 High
- zephyrproject zephyrcan: denial-of-service can be triggered by a crafted CAN frameCVE-2022-27418.2 High
- zephyrproject zephyrOut-of-bound write in tcp_flagsCVE-2022-18417.2 High
- zephyrproject zephyrOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningCVE-2022-10428.2 High
- zephyrproject zephyrOut-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioningCVE-2022-10418.2 High
- zephyrproject zephyrL2CAP: Information leakage in le_ecred_conn_req()CVE-2021-34354.0 Medium
- zephyrproject zephyrL2CAP: Stack based buffer overflow in le_ecred_conn_req()CVE-2021-34344.9 Medium
- zephyrproject zephyrBT: Invalid channel map in CONNECT_IND results to DeadlockCVE-2021-34334.0 Medium
- zephyrproject zephyrBT: Invalid interval in CONNECT_IND leads to Division by ZeroCVE-2021-34324.3 Medium
- zephyrproject zephyrBT: Assertion failure on repeated LL_FEATURE_REQCVE-2021-34314.3 Medium
- zephyrproject zephyrBT: Assertion failure on repeated LL_CONNECTION_PARAM_REQCVE-2021-34306.5 Medium
- zephyrproject zephyrThe RNDIS USB device class includes a buffer overflow vulnerabilityCVE-2021-38618.2 High
- zephyrproject zephyrBuffer overflow in usb device classCVE-2021-38358.2 High
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failureCVE-2021-34544.3 Medium
- zephyrproject zephyrDisconnecting L2CAP channel right after invalid ATT request leads freezeCVE-2021-34554.3 Medium
- zephyrproject zephyrRCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in ZephyrCVE-2021-33307.1 High
- zephyrproject zephyrInteger Underflow in 6LoWPAN IPHC Header Uncompression in ZephyrCVE-2021-33238.3 High
- zephyrproject zephyrUnexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in ZephyrCVE-2021-33226.5 Medium
- zephyrproject zephyrInteger Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header RemovalCVE-2021-33217.5 High
- zephyrproject zephyrBuffer overflow in Zephyr USB DFU DNLOADCVE-2021-3625Public exploit9.6 Critical
- zephyrproject zephyrBuffer Access with Incorrect Length Value in zephyrCVE-2021-35817.0 High
- zephyrproject zephyrZephyr JSON decoder incorrectly decodes array of arrayCVE-2021-35107.5 High
- Show moreLoading…