CVE-2021-3625 Buffer overflow in Zephyr USB DFU DNLOAD

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

CVE-2021-3625

CVE-2021-3625 concerns a heap-based buffer overflow (CWE-122) in Zephyr’s USB DFU DNLOAD path. Affected product: Zephyr RTOS; vulnerable component is the USB DFU DNLOAD code, with root cause described as a heap-based overflow. Impact details in sources indicate a potential for memory data leakage...

CVE-2021-3581

CVE-2021-3581 affects Zephyr RTOS, specifically versions 2.5.0 and later, due to a Buffer Access with Incorrect Length Value (CWE-805) . The available connected sources indicate the issue exists in Zephyr and cite a GHSA advisory; CVSS vectors from NVD point to a high impact (ISC/availability/con...

CVE-2021-3581 Buffer Access with Incorrect Length Value in zephyr

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...

CVE-2021-3510

CVE-2021-3510 affects Zephyr RTOS with the JSON decoder incorrectly decoding arrays, leading to an Attempt to Access Child of a Non-structure Pointer (CWE-588). The vulnerability is evidenced by multiple sources (NVD entry and related advisories) noting the Zephyr JSON decoder mishandling arrays ...

CVE-2021-3510 Zephyr JSON decoder incorrectly decodes array of array

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions = 1.14.0, = 2.5.0 contain Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4...

CVE-2021-3436 BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions = 1.14.2, = 2.4.0, = 2.5.0 contain Use of Multiple Resources with Duplicate Identifier CWE-694. For more information, see...

CVE-2021-3436

CVE-2021-3436 affects Zephyr RTOS. The vulnerability allows overwriting an existing bond during the keys distribution phase if the identity address of the bond is known. Affected releases include Zephyr versions >= 1.14.2, >= 2.4.0, and >= 2.5.0, with the issue categorized under CWE-694 ...

CVE-2021-3319 DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476, Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see...

CVE-2021-3319

CVE-2021-3319 (Zephyr) is linked to a null pointer dereference caused by incorrect 802.15.4 frame validation for omitted source/destination addresses. Affected product: Zephyr RTOS, specifically versions >= v2.4.0. Root cause: mishandling of omitted addresses leading to NULL Pointer Dereferenc...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the use of incorrect values for buffer access. No details of the vulnerability are currently available...

PT-2021-20071 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions = v2.4.0 Description: The issue is related to incorrect 802154 frame validation for omitted source and destination addresses, leading to a NULL Pointer Dereference CWE-476 and an attempt to access a child of a non-structure...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the ZephyrJSON decoder incorrectly decoding arrays. No details of the vulnerability are currently available...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation in the United States. Zephyr suffers from a security vulnerability that stems from the ability to overwrite an existing key during the key distribution phase when the identity address of the key is know...

Zephyr 代码问题漏洞

Zephyr is an open source, small, scalable real-time operating system. Zephyr null pointer dereference vulnerability, which stems from mishandling of omitted source and destination addresses. No detailed vulnerability details are provided at this time...

PT-2021-21063 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions 2.5.0 and later Description: The issue is related to Buffer Access with Incorrect Length Value in Zephyr, which is described as CWE-805. This problem affects Zephyr versions 2.5.0 and later. Recommendations: For Zephyr version...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable, real-time operating system. buffer overflow vulnerability exists in Zephyr, which stems from a buffer overflow in the ZephyrUSB DFU DNLOAD. No detailed vulnerability details are currently available...

CVE-2021-3835

Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...

The vulnerability of the real-time operating system Zephyr’s memory allocation function allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Zephyr’s real-time operating system’s memory allocation function is caused by a numerical overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-3625

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...