Advisories · Technology
zephyr.
Every CVE that names zephyr among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Zephyr JSON decoder incorrectly decodes array of array
- zephyr
- CWE-588
- CVSS 4.3 Medium
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
- zephyr
- CWE-694
- CVSS 6.5 Medium
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses
- zephyr
- Memory corruption
- CWE-588
- CVSS 5.9 Medium
Type Confusion in 802154 ACK Frames Handling
- zephyr
- Memory corruption
- CVSS 6.9 Medium
Integer Overflow in memory allocating functions
- zephyr
- Memory corruption
- CVSS 4.0 Medium
Remote Denial of Service in LwM2M do_write_op_tlv
- zephyr
- Denial of service
- CWE-20
- CVSS 9.0 CriticalCritical · CVSS 9+
Possible read out of bounds in dns read
- zephyr
- Memory corruption
- CVSS 7.0 High
Malformed SPI in response for eswifi can corrupt kernel memory
- zephyr
- Memory corruption
- CVSS 3.3 Low
Security problem with settings and littlefs
- zephyr
- Broken access control
- CVSS 6.3 Medium
FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat
- zephyr
- Memory corruption
- CVSS 5.9 Medium
Improper Handling of Insufficient Permissions or Privileges in zephyr
- zephyr
- CWE-280
- CVSS 4.3 Medium
Zephyr Bluetooth unchecked packet data results in denial of service
- zephyr
- CWE-233
- CVSS 2.5 Low
Incorrect Error Handling in Bluetooth HCI core
- zephyr
- Memory corruption
- CVSS 3.8 Low
Missing Size Checks in Bluetooth HCI over SPI
- zephyr
- CWE-130
- CVSS 8.3 High
Improper Input Frame Validation in ieee802154 Processing
- zephyr
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Insufficient publish message length validation in MQTT
- zephyr
- Memory corruption
- CWE-129
- CVSS 9.0 CriticalCritical · CVSS 9+
MQTT buffer overflow on receive buffer
- zephyr
- Memory corruption
- CVSS 5.1 Medium
Zephyr Bluetooth DLE duplicate requests vulnerability
- zephyr
- CWE-20
- CVSS 6.8 Medium
Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow
- zephyr
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Packet length decoding error in MQTT
- zephyr
- CWE-193
- CVSS 8.1 High
Error handling invalid packet sequence
- zephyr
- Memory corruption
- CVSS 7.5 High
Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory
- zephyr
- Memory corruption
- CVSS 8.0 High
UpdateHub Might Dereference An Uninitialized Pointer
- zephyr
- Memory corruption
- CVSS 4.8 Medium
UpdateHub Module Explicitly Disables TLS Verification
- zephyr
- Weak cryptography or TLS
- CVSS 7.8 High
Multiple Syscalls In kscan Subsystem Performs No Argument Validation
- zephyr
- CWE-20
- CVSS 7.8 High
Multiple Syscalls In GPIO Subsystem Performs No Argument Validation
- zephyr
- CWE-20
- CVSS 7.8 High
ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers
- zephyr
- CWE-697
- CVSS 7.8 High
ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers
- zephyr
- CWE-697
- CVSS 6.9 Medium
Shell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trim
- zephyr
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array
- zephyr
- Memory corruption
- CVSS 8.1 High
Out-of-bounds write in USB Mass Storage with unaligned sizes
- zephyr
- Memory corruption
- CVSS 8.1 High
Buffer Overflow in USB DFU requested length
- zephyr
- Memory corruption