agentprime: zephyrEvery new CVE for zephyr.https://agentprime.io/CVE-2026-87044: Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of servicehttps://agentprime.io/advisories/CVE-2026-87044/https://agentprime.io/advisories/CVE-2026-87044/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:09 GMTCVECVE-2026-87043: sys_rand_get() silently returns an unwritten buffer when the entropy device is not readyhttps://agentprime.io/advisories/CVE-2026-87043/https://agentprime.io/advisories/CVE-2026-87043/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:08 GMTCVECVE-2026-87041: Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memoryhttps://agentprime.io/advisories/CVE-2026-87041/https://agentprime.io/advisories/CVE-2026-87041/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:07 GMTCVECVE-2026-87040: Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and writehttps://agentprime.io/advisories/CVE-2026-87040/https://agentprime.io/advisories/CVE-2026-87040/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:06 GMTCVECVE-2026-87039: I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to drivershttps://agentprime.io/advisories/CVE-2026-87039/https://agentprime.io/advisories/CVE-2026-87039/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:04 GMTCVECVE-2026-87038: Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user modehttps://agentprime.io/advisories/CVE-2026-87038/https://agentprime.io/advisories/CVE-2026-87038/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:03 GMTCVECVE-2026-16511: Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memoryhttps://agentprime.io/advisories/CVE-2026-16511/https://agentprime.io/advisories/CVE-2026-16511/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:02 GMTCVECVE-2026-85036: Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queuehttps://agentprime.io/advisories/CVE-2026-85036/https://agentprime.io/advisories/CVE-2026-85036/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:09:01 GMTCVECVE-2026-85035: Use-after-free via dynamically allocated message queue retained by the CAN RX filterhttps://agentprime.io/advisories/CVE-2026-85035/https://agentprime.io/advisories/CVE-2026-85035/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 13:36:08 GMTCVECVE-2026-85034: Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribershttps://agentprime.io/advisories/CVE-2026-85034/https://agentprime.io/advisories/CVE-2026-85034/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 13:36:07 GMTCVECVE-2026-85033: Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peerhttps://agentprime.io/advisories/CVE-2026-85033/https://agentprime.io/advisories/CVE-2026-85033/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 13:36:06 GMTCVECVE-2026-85032: Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progresshttps://agentprime.io/advisories/CVE-2026-85032/https://agentprime.io/advisories/CVE-2026-85032/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 13:36:05 GMTCVECVE-2026-82962: Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packethttps://agentprime.io/advisories/CVE-2026-82962/https://agentprime.io/advisories/CVE-2026-82962/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:59:00 GMTCVECVE-2026-82961: Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user modehttps://agentprime.io/advisories/CVE-2026-82961/https://agentprime.io/advisories/CVE-2026-82961/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:58:58 GMTCVECVE-2026-82390: Cross-session AES key confusion in the Espressif ESP32 hardware crypto driverhttps://agentprime.io/advisories/CVE-2026-82390/https://agentprime.io/advisories/CVE-2026-82390/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:54 GMTCVECVE-2026-82389: Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereferencehttps://agentprime.io/advisories/CVE-2026-82389/https://agentprime.io/advisories/CVE-2026-82389/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:53 GMTCVECVE-2026-82388: Use of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic hosthttps://agentprime.io/advisories/CVE-2026-82388/https://agentprime.io/advisories/CVE-2026-82388/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:52 GMTCVECVE-2026-19742: IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret keyhttps://agentprime.io/advisories/CVE-2026-19742/https://agentprime.io/advisories/CVE-2026-19742/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:51 GMTCVECVE-2026-81038: Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responseshttps://agentprime.io/advisories/CVE-2026-81038/https://agentprime.io/advisories/CVE-2026-81038/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:50 GMTCVECVE-2026-81039: Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identityhttps://agentprime.io/advisories/CVE-2026-81039/https://agentprime.io/advisories/CVE-2026-81039/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 16:08:48 GMTCVECVE-2026-79982: Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet sizehttps://agentprime.io/advisories/CVE-2026-79982/https://agentprime.io/advisories/CVE-2026-79982/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:19 GMTCVECVE-2026-79981: DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofinghttps://agentprime.io/advisories/CVE-2026-79981/https://agentprime.io/advisories/CVE-2026-79981/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:18 GMTCVECVE-2026-79980: Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNShttps://agentprime.io/advisories/CVE-2026-79980/https://agentprime.io/advisories/CVE-2026-79980/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:17 GMTCVECVE-2026-79979: Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frameshttps://agentprime.io/advisories/CVE-2026-79979/https://agentprime.io/advisories/CVE-2026-79979/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:16 GMTCVECVE-2026-79978: Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read pathhttps://agentprime.io/advisories/CVE-2026-79978/https://agentprime.io/advisories/CVE-2026-79978/CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:14 GMTCVECVE-2026-79977: WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyrhttps://agentprime.io/advisories/CVE-2026-79977/https://agentprime.io/advisories/CVE-2026-79977/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:13 GMTCVECVE-2026-19741: OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)https://agentprime.io/advisories/CVE-2026-19741/https://agentprime.io/advisories/CVE-2026-19741/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 19:56:12 GMTCVECVE-2026-19947: Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexerhttps://agentprime.io/advisories/CVE-2026-19947/https://agentprime.io/advisories/CVE-2026-19947/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:35 GMTCVECVE-2026-79976: NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controllerhttps://agentprime.io/advisories/CVE-2026-79976/https://agentprime.io/advisories/CVE-2026-79976/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:34 GMTCVECVE-2026-78119: Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet lengthhttps://agentprime.io/advisories/CVE-2026-78119/https://agentprime.io/advisories/CVE-2026-78119/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:33 GMTCVECVE-2026-78118: Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMPhttps://agentprime.io/advisories/CVE-2026-78118/https://agentprime.io/advisories/CVE-2026-78118/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:32 GMTCVECVE-2026-78117: Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the airhttps://agentprime.io/advisories/CVE-2026-78117/https://agentprime.io/advisories/CVE-2026-78117/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:31 GMTCVECVE-2026-18748: Out-of-bounds read in Bluetooth Classic A2DP codec information element handlinghttps://agentprime.io/advisories/CVE-2026-18748/https://agentprime.io/advisories/CVE-2026-18748/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:29 GMTCVECVE-2026-78116: Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error pathhttps://agentprime.io/advisories/CVE-2026-78116/https://agentprime.io/advisories/CVE-2026-78116/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:28 GMTCVECVE-2026-19676: PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user modehttps://agentprime.io/advisories/CVE-2026-19676/https://agentprime.io/advisories/CVE-2026-19676/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:19:27 GMTCVECVE-2026-77684: Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of servicehttps://agentprime.io/advisories/CVE-2026-77684/https://agentprime.io/advisories/CVE-2026-77684/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 22:49:41 GMTCVECVE-2026-19595: Zephyr RTIO syscall verifier validates output parameters for read instead of write accesshttps://agentprime.io/advisories/CVE-2026-19595/https://agentprime.io/advisories/CVE-2026-19595/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 22:49:40 GMTCVECVE-2026-76788: Stack out-of-bounds write in the OSDP Control Panel reply parserhttps://agentprime.io/advisories/CVE-2026-76788/https://agentprime.io/advisories/CVE-2026-76788/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 20:39:22 GMTCVECVE-2026-76787: NULL pointer dereference in the UpdateHub FOTA client when probe metadata omits sha256sumhttps://agentprime.io/advisories/CVE-2026-76787/https://agentprime.io/advisories/CVE-2026-76787/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 20:39:20 GMTCVECVE-2026-75085: Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driverhttps://agentprime.io/advisories/CVE-2026-75085/https://agentprime.io/advisories/CVE-2026-75085/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:46:02 GMTCVECVE-2026-75084: Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet lengthhttps://agentprime.io/advisories/CVE-2026-75084/https://agentprime.io/advisories/CVE-2026-75084/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:46:01 GMTCVECVE-2026-19673: Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN headerhttps://agentprime.io/advisories/CVE-2026-19673/https://agentprime.io/advisories/CVE-2026-19673/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:45:57 GMTCVECVE-2026-75083: Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driverhttps://agentprime.io/advisories/CVE-2026-75083/https://agentprime.io/advisories/CVE-2026-75083/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:45:56 GMTCVECVE-2026-19940: Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeepinghttps://agentprime.io/advisories/CVE-2026-19940/https://agentprime.io/advisories/CVE-2026-19940/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:40:10 GMTCVECVE-2026-19939: Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruptionhttps://agentprime.io/advisories/CVE-2026-19939/https://agentprime.io/advisories/CVE-2026-19939/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:39:16 GMTCVECVE-2026-19938: Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command failshttps://agentprime.io/advisories/CVE-2026-19938/https://agentprime.io/advisories/CVE-2026-19938/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 23:19:55 GMTCVECVE-2026-19937: Bluetooth Mesh Access layer permanently leaks delayable-message contexts, disabling all model responseshttps://agentprime.io/advisories/CVE-2026-19937/https://agentprime.io/advisories/CVE-2026-19937/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 23:19:54 GMTCVECVE-2026-19936: Bluetooth Mesh delayable message queue: unsynchronized list access leads to NULL pointer dereferencehttps://agentprime.io/advisories/CVE-2026-19936/https://agentprime.io/advisories/CVE-2026-19936/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 23:19:53 GMTCVECVE-2026-19740: Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedurehttps://agentprime.io/advisories/CVE-2026-19740/https://agentprime.io/advisories/CVE-2026-19740/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 17:15:08 GMTCVECVE-2026-19739: Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Updatehttps://agentprime.io/advisories/CVE-2026-19739/https://agentprime.io/advisories/CVE-2026-19739/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 17:15:06 GMTCVE