CVE-2021-3510

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions = 1.14.0, = 2.5.0 contain Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4...

CVE-2021-3510 Zephyr JSON decoder incorrectly decodes array of array

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions = 1.14.0, = 2.5.0 contain Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4...

CVE-2021-3510

CVE-2021-3510 affects Zephyr RTOS with the JSON decoder incorrectly decoding arrays, leading to an Attempt to Access Child of a Non-structure Pointer (CWE-588). The vulnerability is evidenced by multiple sources (NVD entry and related advisories) noting the Zephyr JSON decoder mishandling arrays ...

CVE-2021-3436 BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions = 1.14.2, = 2.4.0, = 2.5.0 contain Use of Multiple Resources with Duplicate Identifier CWE-694. For more information, see...

CVE-2021-3436

CVE-2021-3436 affects Zephyr RTOS. The vulnerability allows overwriting an existing bond during the keys distribution phase if the identity address of the bond is known. Affected releases include Zephyr versions >= 1.14.2, >= 2.4.0, and >= 2.5.0, with the issue categorized under CWE-694 ...

CVE-2021-3436

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions = 1.14.2, = 2.4.0, = 2.5.0 contain Use of Multiple Resources with Duplicate Identifier CWE-694. For more information, see...

CVE-2021-3319 DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476, Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see...

CVE-2021-3319

CVE-2021-3319 (Zephyr) is linked to a null pointer dereference caused by incorrect 802.15.4 frame validation for omitted source/destination addresses. Affected product: Zephyr RTOS, specifically versions >= v2.4.0. Root cause: mishandling of omitted addresses leading to NULL Pointer Dereferenc...

CVE-2021-3319

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476, Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see...

PT-2021-20071 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions = v2.4.0 Description: The issue is related to incorrect 802154 frame validation for omitted source and destination addresses, leading to a NULL Pointer Dereference CWE-476 and an attempt to access a child of a non-structure...

CVE-2021-3581: Buffer Access with Incorrect Length Value

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable, real-time operating system. buffer overflow vulnerability exists in Zephyr, which stems from a buffer overflow in the ZephyrUSB DFU DNLOAD. No detailed vulnerability details are currently available...

CVE-2021-3436: Use of Multiple Resources with Duplicate Identifier

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions = 1.14.2, = 2.4.0, = 2.5.0 contain Use of Multiple Resources with Duplicate Identifier CWE-694. For more information, see...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the ZephyrJSON decoder incorrectly decoding arrays. No details of the vulnerability are currently available...

PT-2021-20825

Name of the Vulnerable Software and Affected Versions: Zephyr versions 1.14.0 and later, 2.5.0 and later Description: The Zephyr JSON decoder incorrectly decodes an array of arrays, which can lead to an attempt to access a child of a non-structure pointer. This issue is related to CWE-588...

CVE-2021-3625: Heap-based Buffer Overflow

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

PT-2021-21063 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions 2.5.0 and later Description: The issue is related to Buffer Access with Incorrect Length Value in Zephyr, which is described as CWE-805. This problem affects Zephyr versions 2.5.0 and later. Recommendations: For Zephyr version...

CVE-2021-3319: NULL Pointer Dereference

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions = v2.4.0 contain NULL Pointer Dereference CWE-476, Attempt to Access Child of a Non-structure Pointer CWE-588. For more information, see...

Zephyr 代码问题漏洞

Zephyr is an open source, small, scalable real-time operating system. Zephyr null pointer dereference vulnerability, which stems from mishandling of omitted source and destination addresses. No detailed vulnerability details are provided at this time...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the use of incorrect values for buffer access. No details of the vulnerability are currently available...