CVE-2026-12364

The CVE-2026-12364 issue affects the Zephyr kernel’s user-space syscall verifier z_vrfy_z_log_msg_static_create(). The verifier failed to enforce K_SYSCALL_* checks when forwarding source, desc, package, and data to z_impl_z_log_msg_static_create(), allowing an attacker-controlled user-space thre...

CVE-2026-12052 Out-of-bounds write in USB CDC NCM control handler when host wLength is smaller than the response

The USB device-side CDC NCM class control-to-host handler usbdcdcncmcth in subsys/usb/devicenext/class/usbdcdcncm.c builds a fixed-size response for the GETNTBPARAMETERS 28-byte struct ntbparameters and GETNTBINPUTSIZE 8-byte struct ntbinputsize class requests and copies the whole structure into...

CVE-2026-12052

The CVE-2026-12052 issue affects Zephyr’s USB device CDC NCM class (usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c). The handler builds fixed-size responses for GET_NTB_PARAMETERS (28-byte) and GET_NTB_INPUT_SIZE (8-byte) and copies the entire structure into the control DATA IN b...

PT-2026-70058

Name of the Vulnerable Software and Affected Versions Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x affected versions not specified Description The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers contains an issue where the bt bflb send function in drivers/bluetooth/hci/hci...

CVE-2026-11810

CVE-2026-11810 affects Zephyr’s UpdateHub firmware-update agent. The probe handler z_impl_updatehub_probe() parses CoAP-provided JSON metadata into a two-level nested array; it only validates the outer array length and then dereferences objects[1].objects[0].objects.sha256sum with strlen() withou...

CVE-2026-10651 Out-of-bounds read in Bluetooth Classic SDP attribute parsing (`bt_sdp_parse_attribute`)

btsdpparseattribute in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID a check of buf-len data0 before its only bounds guard an ASSERTNOMSG that compiles out when CONFIGASSERT is disabled, the production default,...

CVE-2023-4424

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

EUVD-2020-2487

Malware in sbrugna...

EUVD-2023-54286

Malicious code in bioql PyPI...

EUVD-2023-59247

Malicious code in bioql PyPI...

CVE-2023-7060

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address...

CVE-2024-6443

CVE-2024-6443 affects Zephyr RTOS in the UTF-8 utility function utf8_trunc (zephyr/lib/utils/utf8.c). The root cause is that last_byte_p can point to one byte before the string pointer when the input string is empty, causing an out-of-bounds read. Connected sources confirm the issue location and ...

Unpatched Zephyr OS Expose Devices to DoS Attacks via IP Spoofing

By Waqas Is your organisation using Zephyr OS? Patch and update it to the latest version now! This is a post from HackRead.com Read the original post: Unpatched Zephyr OS Expose Devices to DoS Attacks via IP Spoofing...

CVE-2023-7060

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address...

CVE-2023-7060 Missing Security Control in Zephyr OS IP Packet Handling

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address...

CVE-2023-7060 Missing Security Control in Zephyr OS IP Packet Handling

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address...

CVE-2023-7060

CVE-2023-7060 affects Zephyr OS IP packet handling. The issue can cause external-interface IP packets with a source address of 127.0.01 (or destination address) to not be properly dropped, potentially impacting availability. Affected component: Zephyr OS networking/IP filtering; root cause: impro...

CVE-2023-7060 Missing Security Control in Zephyr OS IP Packet Handling

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address...

PT-2024-15189 · Zephyr Os · Zephyr Os

Name of the Vulnerable Software and Affected Versions: Zephyr OS affected versions not specified Description: The issue concerns the handling of IP packets in Zephyr OS. Specifically, it does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.0.1 o...

CVE-2023-4424

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...