The vulnerability of the subsys/canbus/isotp/isotp.c file in the CAN-bus subsystem of the real-time operating system Zephyr allows a attacker to execute arbitrary code.

The vulnerability of the subsys/canbus/isotp/isotp.c file in the CAN-bus subsystem of the real-time operating system Zephyr relates to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code...

Malicious code in ui-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a561b294f7f6a0f789590b0275ba5e20bf81a33bc4ea74485664883386c144b6 The OpenSSF Package Analysis project identified 'ui-zephyr' @ 19.20.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8628 Malicious code in ui-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a561b294f7f6a0f789590b0275ba5e20bf81a33bc4ea74485664883386c144b6 The OpenSSF Package Analysis project identified 'ui-zephyr' @ 19.20.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-4424

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

Buffer overflow

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

CVE-2023-4424 bt: hci: DoS and possible RCE

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

CVE-2023-4424 bt: hci: DoS and possible RCE

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

CVE-2023-4424

CVE-2023-4424 affects Zephyr OS Bluetooth: a malicious BLE device can trigger a buffer overflow by sending malformed advertising packets, potentially causing DoS or remote code execution on the victim device. The issue is linked to the HCI Bluetooth controller path (le_advertising_report) and ste...

PT-2023-31584 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue might be related to a possible variant of a problem in the function le ecred reconf req. Recommendations: At the moment, there is no information about a newer version that...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4 and prior versions that stems from the fact that sending a malformed advertisement packet can cause a buffer overflow, which can lead to a denial of service or...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4 and earlier versions that stems from the presence of a heap-based buffer overflow...

Buffer Overflow

zephyr is vulnerable to Buffer Overflow. The vulnerability arises due to a lack of buffer size validation in the assert function in subsys/bluetooth/host/hcicore.c...

CVE-2023-5139

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver...

Buffer overflow

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver...

CVE-2023-5139 Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver...

CVE-2023-5139 Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver...

CVE-2023-5139 Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver...

CVE-2023-5139

CVE-2023-5139 describes a potential buffer overflow in the Zephyr STM32 Crypto driver. Public sources indicate a vulnerability in the Zephyr STM32 Crypto driver, with a CVSSv3.1 base score of 7.8 (HIGH) from NVD and a separate disclosure indicating a lower-industriality impact (MEDIUM) in Zephyr ...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in the Zephyr STM32 Crypto driver...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a possible buffer overflow in the Bluetooth subsystem due to disabled assertions in /subsys/bluetooth/host/hcicore.c...