Advisories · Technology

Zephyr.

Every CVE that names Zephyr among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-6137 CVE record

CVSS 7.6 High

BT: Classic: SDP OOB access in get_att_search_list
- Zephyr
- Memory corruption
Not analysed yet 13 Sept 2024
CVE-2024-6135 CVE record

CVSS 7.6 High

BT:Classic: Multiple missing buf length checks
- Zephyr
- Memory corruption
Not analysed yet 13 Sept 2024
CVE-2024-5931 CVE record

CVSS 6.3 Medium

BT: Unchecked user input in bap_broadcast_assistant
- Zephyr
- Memory corruption
- CWE-1284
Not analysed yet 13 Sept 2024
CVE-2024-6258 CVE record

CVSS 6.8 Medium

BT: Missing length checks of net_buf in rfcomm_handle_data
- Zephyr
- Memory corruption
Not analysed yet 13 Sept 2024
CVE-2024-5754 CVE record

CVSS 8.2 High

BT: Encryption procedure host vulnerability
- Zephyr
- CWE-807
Not analysed yet 13 Sept 2024
CVE-2024-4785 CVE record

CVSS 7.6 High

BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero
- Zephyr
- Denial of service
Not analysed yet 19 Aug 2024
CVE-2024-3332 CVE record

CVSS 6.5 Medium

bt: host/smp: DoS caused by null pointer dereference
- Zephyr
- Memory corruption
Not analysed yet 3 Jul 2024
CVE-2024-3077 CVE record

CVSS 6.8 Medium

Bluetooth: integer underflow in gatt_find_info_rsp
- Zephyr
- Memory corruption
- CWE-126
Not analysed yet 29 Mar 2024
CVE-2023-7060 CVE record

CVSS 8.6 High

Missing Security Control in Zephyr OS IP Packet Handling
- Zephyr
- CWE-20
Not analysed yet 15 Mar 2024
CVE-2023-6881 CVE record

CVSS 7.3 High

fs: fuse: buffer overflow vulnerability in the Zephyr FS
- Zephyr
- Memory corruption
Not analysed yet 20 Feb 2024
CVE-2024-1638 CVE record

CVSS 8.2 High

Bluetooth characteristic LESC security requirement not enforced without additional flags
- Zephyr
- CWE-20
Not analysed yet 19 Feb 2024
CVE-2023-5779 CVE record

CVSS 4.4 Medium

can: out of bounds in remove_rx_filter function
- Zephyr
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-6249 CVE record

CVSS 8.0 High

ipm: signed to unsigned conversion problem in esp32_ipm_send
- Zephyr
- CWE-704
Not analysed yet 18 Feb 2024
CVE-2023-6749 CVE record

CVSS 8.0 High

Unchecked user input length in the Zephyr Settings Shell
- Zephyr
- Memory corruption
Not analysed yet 18 Feb 2024
CVE-2023-5055 CVE record

CVSS 8.3 High

L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
- Zephyr
- Memory corruption
Not analysed yet 21 Nov 2023
CVE-2023-4424 CVE record

CVSS 8.3 High

bt: hci: DoS and possible RCE
- Zephyr
- Memory corruption
Not analysed yet 21 Nov 2023
CVE-2023-5139 CVE record

CVSS 4.4 Medium

Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver
- Zephyr
- Memory corruption
Not analysed yet 26 Oct 2023
CVE-2023-5753 CVE record

CVSS 6.3 Medium

Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
- Zephyr
- Memory corruption
Not analysed yet 24 Oct 2023
CVE-2023-4257 CVE record

CVSS 7.6 High

Unchecked user input length in the Zephyr WiFi shell module
- Zephyr
- Memory corruption
Not analysed yet 13 Oct 2023
CVE-2023-4263 CVE record

CVSS 7.6 High

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver
- Zephyr
- Memory corruption
Not analysed yet 13 Oct 2023
CVE-2023-5563 CVE record

CVSS 7.1 High

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y.
- Zephyr
- CWE-703
Not analysed yet 12 Oct 2023
CVE-2023-3725 CVE record

CVSS 7.6 High

Potential buffer overflow vulnerability in the Zephyr CANbus subsystem
- Zephyr
- Memory corruption
Not analysed yet 6 Oct 2023
CVE-2023-5184 CVE record

CVSS 7.0 High

Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
- Zephyr
- Memory corruption
- CWE-195
Not analysed yet 27 Sept 2023
CVE-2023-4260 CVE record

CVSS 6.3 Medium

Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
- Zephyr
- Memory corruption
- CWE-193
Not analysed yet 26 Sept 2023
CVE-2023-4264 CVE record

CVSS 7.1 High

Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
- Zephyr
- Memory corruption
Not analysed yet 26 Sept 2023
CVE-2023-4259 CVE record

CVSS 7.1 High

Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver
- Zephyr
- Memory corruption
- CWE-193
Not analysed yet 25 Sept 2023
CVE-2023-4258 CVE record

CVSS 8.6 High

bt: mesh: vulnerability in provisioning protocol implementation on provisionee side
- Zephyr
- CWE-684
Not analysed yet 25 Sept 2023
CVE-2023-4265 CVE record

CVSS 6.4 Medium

Buffer overflow in Zephyr USB
- Zephyr
- Memory corruption
Not analysed yet 12 Aug 2023
CVE-2023-1901 CVE record

CVSS 5.9 Medium

HCI send_sync Dangling Semaphore Reference Re-use
- Zephyr
- CWE-672
Not analysed yet 10 Jul 2023
CVE-2023-2234 CVE record

CVSS 6.8 Medium

BT HCI host union variant confusion
- Zephyr
- Memory corruption
Not analysed yet 10 Jul 2023
CVE-2023-1902 CVE record

CVSS 5.9 Medium

HCI Connection Creation Dangling State Reference Re-use
- Zephyr
- CWE-672
Not analysed yet 10 Jul 2023
CVE-2023-0359 CVE record

CVSS 5.9 Medium

ipv6: Missing ipv6 nullptr-check in handle_ra_input
- Zephyr
- CWE-20
Not analysed yet 10 Jul 2023
CVE-2023-0779 CVE record

CVSS 6.7 Medium

net: shell: Improper input validation
- zephyr
- CWE-20
Not analysed yet 30 May 2023
CVE-2021-3329 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer
- zephyr
- CWE-703
Not analysed yet 26 Feb 2023
CVE-2023-0397 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DoS: Invalid Initialization in le_read_buffer_size_complete
- zephyr
- CWE-703
Not analysed yet 19 Jan 2023
CVE-2023-0396 CVE record

CVSS 6.8 Medium

Buffer Overreads in Bluetooth HCI
- zephyr
- CWE-126
Not analysed yet 19 Jan 2023
CVE-2022-3806 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Bluetooth HCI Error Handling Double Free
- zephyr
- Memory corruption
Not analysed yet 19 Jan 2023
CVE-2022-0553 CVE record

CVSS 6.5 Medium

Possible to retrieve uncrypted firmware image
- zephyr
- Information disclosure
Not analysed yet 11 Jan 2023
CVE-2021-3966 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Usb bluetooth device ACL read cb buffer overflow
- zephyr
- Memory corruption
Not analysed yet 11 Jan 2023
CVE-2022-2993 CVE record

CVSS 8.6 High

bt: host: Wrong key validation check
- zephyr
- CWE-670
Not analysed yet 12 Dec 2022
CVE-2022-2741 CVE record

CVSS 8.2 High

can: denial-of-service can be triggered by a crafted CAN frame
- zephyr
- Denial of service
Not analysed yet 31 Oct 2022
CVE-2022-1841 CVE record

CVSS 7.2 High

Out-of-bound write in tcp_flags
- zephyr
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-1042 CVE record

CVSS 8.2 High

Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
- zephyr
- Memory corruption
Not analysed yet 26 Jul 2022
CVE-2022-1041 CVE record

CVSS 8.2 High

Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
- zephyr
- Memory corruption
Not analysed yet 26 Jul 2022
CVE-2021-3435 CVE record

CVSS 4.0 Medium

L2CAP: Information leakage in le_ecred_conn_req()
- zephyr
- Memory corruption
Not analysed yet 28 Jun 2022
CVE-2021-3434 CVE record

CVSS 4.9 Medium

L2CAP: Stack based buffer overflow in le_ecred_conn_req()
- zephyr
- Memory corruption
Not analysed yet 28 Jun 2022
CVE-2021-3433 CVE record

CVSS 4.0 Medium

BT: Invalid channel map in CONNECT_IND results to Deadlock
- zephyr
- CWE-703
Not analysed yet 28 Jun 2022
CVE-2021-3432 CVE record

CVSS 4.3 Medium

BT: Invalid interval in CONNECT_IND leads to Division by Zero
- zephyr
- Denial of service
Not analysed yet 28 Jun 2022
CVE-2021-3431 CVE record

CVSS 4.3 Medium

BT: Assertion failure on repeated LL_FEATURE_REQ
- zephyr
- Denial of service
Not analysed yet 28 Jun 2022
CVE-2021-3430 CVE record

CVSS 6.5 Medium

BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ
- zephyr
- Denial of service
Not analysed yet 28 Jun 2022
CVE-2021-3861 CVE record

CVSS 8.2 High

The RNDIS USB device class includes a buffer overflow vulnerability
- zephyr
- Memory corruption
Not analysed yet 7 Feb 2022
CVE-2021-3835 CVE record

CVSS 8.2 High

Buffer overflow in usb device class
- zephyr
- Memory corruption
Not analysed yet 7 Feb 2022
CVE-2021-3454 CVE record

CVSS 4.3 Medium

Truncated L2CAP K-frame causes assertion failure
- zephyr
- Denial of service
- CWE-130
Not analysed yet 19 Oct 2021
CVE-2021-3455 CVE record

CVSS 4.3 Medium

Disconnecting L2CAP channel right after invalid ATT request leads freeze
- zephyr
- Memory corruption
Not analysed yet 19 Oct 2021
CVE-2021-3330 CVE record

CVSS 7.1 High

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr
- zephyr
- Memory corruption
Not analysed yet 12 Oct 2021
CVE-2021-3323 CVE record

CVSS 8.3 High

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr
- zephyr
- Memory corruption
Not analysed yet 12 Oct 2021
CVE-2021-3322 CVE record

CVSS 6.5 Medium

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr
- zephyr
- Memory corruption
Not analysed yet 12 Oct 2021
CVE-2021-3321 CVE record

CVSS 7.5 High

Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal
- zephyr
- Memory corruption
Not analysed yet 12 Oct 2021
CVE-2021-3625 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Buffer overflow in Zephyr USB DFU DNLOAD
- zephyr
- Memory corruption
Not analysed yet 5 Oct 2021
CVE-2021-3581 CVE record

CVSS 7.0 High

Buffer Access with Incorrect Length Value in zephyr
- zephyr
- Memory corruption
Not analysed yet 5 Oct 2021