1755 matches found
Improperly Implemented Security Check for Standard
Overview Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard in the leconnrsp process. An attacker can cause a denial of service by sending an out-of-context Bluetooth Low Energy connection response when no connection request was initiated...
Write-what-where Condition
Overview Affected versions of this package are vulnerable to Write-what-where Condition via the btconntxprocessor function. An attacker can achieve precise memory corruption by triggering a use-after-free condition that allows writing attacker-controlled data before memory is zeroed. Remediation...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from mishandling of btconntxprocessor resulting in reuse after release, which may result in memory corruption...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a flaw in the handling of the Bluetooth Low Energy Fixed Channel, which could lead to undefined behavior, including assertion failure, crashes, or memory...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a BLE connection response handler function that does not validate whether a response is expected and relies only on identifier matching...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in zephyr that stems from unvalidated or cleaned parameters that could lead to the exploitation of internal operations...
Linux Distros Unpatched Vulnerability : CVE-2021-3835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see...
Linux Distros Unpatched Vulnerability : CVE-2022-2839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated user...
Linux Distros Unpatched Vulnerability : CVE-2024-6443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In utf8trunc in zephyr/lib/utils/utf8.c, lastbytep can point to one byte before the string pointer if the string is empty. CVE-2024-6443 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2021-3861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information,...
Linux Distros Unpatched Vulnerability : CVE-2024-6444
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c. CVE-2024-6444 Note that Nessus relies on...
Malicious code in betelgeuse-json-redgiant-zephyr (npm)
The package betelgeuse-json-redgiant-zephyr was found to contain malicious code...
Malicious code in command-frontend-leda-zephyr (npm)
The package command-frontend-leda-zephyr was found to contain malicious code...
Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
Malicious code in cloud-zephyr-oaw109-project (npm)
The package cloud-zephyr-oaw109-project was found to contain malicious code...
MAL-2025-43832 Malicious code in cloud-zephyr-oaw109-project (npm)
The package cloud-zephyr-oaw109-project was found to contain malicious code...
MAL-2025-46876 Malicious code in zephyr-electron-builder-cross-env-cressida (npm)
The package zephyr-electron-builder-cross-env-cressida was found to contain malicious code...
MAL-2025-44196 Malicious code in exosphere-cybernetics-zephyr-nova (npm)
The package exosphere-cybernetics-zephyr-nova was found to contain malicious code...