Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ZephyrprojectZephyr

29 matches found

CVE
CVE•added 2021/05/25 5:15 p.m.•192 views

CVE-2021-3320

Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7

7.5CVSS6.6AI score0.00336EPSS
CVE
CVE•added 2019/08/29 1:15 a.m.•161 views

CVE-2017-14201

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

7.8CVSS8.1AI score0.00698EPSS
CVE
CVE•added 2019/08/29 1:15 a.m.•155 views

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.

7.8CVSS7.9AI score0.00155EPSS
CVE
CVE•added 2020/06/05 6:15 p.m.•103 views

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.

7.5CVSS7AI score0.0187EPSS
CVE
CVE•added 2021/10/19 11:15 p.m.•87 views

CVE-2021-3454

Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29...

7.5CVSS5.9AI score0.00334EPSS
CVE
CVE•added 2021/10/19 11:15 p.m.•81 views

CVE-2021-3455

Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp

7.5CVSS6AI score0.00393EPSS
CVE
CVE•added 2021/05/25 5:15 p.m.•70 views

CVE-2020-13603

Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45

7.8CVSS7.3AI score0.00057EPSS
CVE
CVE•added 2020/05/11 11:15 p.m.•66 views

CVE-2020-10027

An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.

7.8CVSS7.8AI score0.00092EPSS
CVE
CVE•added 2020/05/11 11:15 p.m.•58 views

CVE-2020-10028

Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.

7.8CVSS7.7AI score0.00077EPSS
CVE
CVE•added 2020/05/11 11:15 p.m.•57 views

CVE-2020-10024

The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and...

7.8CVSS7.8AI score0.00092EPSS
CVE
CVE•added 2022/06/28 8:15 p.m.•56 views

CVE-2021-3434

Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm

7.8CVSS6.8AI score0.00097EPSS
CVE
CVE•added 2020/05/11 11:15 p.m.•55 views

CVE-2020-10067

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the ker...

7.8CVSS8AI score0.00062EPSS
CVE
CVE•added 2022/06/28 8:15 p.m.•55 views

CVE-2021-3432

Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4

7.5CVSS5.8AI score0.00389EPSS
CVE
CVE•added 2020/05/11 11:15 p.m.•54 views

CVE-2020-10058

Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.

7.8CVSS7.8AI score0.00081EPSS
CVE
CVE•added 2022/06/28 8:15 p.m.•53 views

CVE-2021-3430

Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr

7.5CVSS7AI score0.00317EPSS
CVE
CVE•added 2022/06/28 8:15 p.m.•53 views

CVE-2021-3431

Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9

7.5CVSS5.9AI score0.00389EPSS
CVE
CVE•added 2023/07/10 4:15 p.m.•52 views

CVE-2023-0359

A missing nullptr-check in handle_ra_input can cause a nullptr-deref.

7.5CVSS6.2AI score0.00228EPSS
CVE
CVE•added 2024/09/13 9:15 p.m.•48 views

CVE-2024-6259

BT: HCI: adv_ext_report Improper discarding in adv_ext_report

7.6CVSS6.9AI score0.00077EPSS
CVE
CVE•added 2022/08/31 8:15 p.m.•46 views

CVE-2022-1841

In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero.

7.2CVSS5.7AI score0.00062EPSS
CVE
CVE•added 2024/09/13 8:15 p.m.•46 views

CVE-2024-6135

BT:Classic: Multiple missing buf length checks

7.6CVSS7AI score0.00077EPSS
CVE
CVE•added 2023/05/30 9:15 p.m.•44 views

CVE-2023-0779

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

7.7CVSS7AI score0.00214EPSS
CVE
CVE•added 2023/10/26 5:15 a.m.•43 views

CVE-2023-5139

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver

7.8CVSS6.2AI score0.0023EPSS
CVE
CVE•added 2024/08/19 10:15 p.m.•43 views

CVE-2024-4785

BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero

7.6CVSS6.9AI score0.0009EPSS
CVE
CVE•added 2024/09/13 8:15 p.m.•41 views

CVE-2024-6137

BT: Classic: SDP OOB access in get_att_search_list

7.6CVSS6.9AI score0.00083EPSS
CVE
CVE•added 2024/12/16 12:15 a.m.•41 views

CVE-2024-8798

No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.

7.5CVSS7.5AI score0.00202EPSS
CVE
CVE•added 2021/05/25 5:15 p.m.•39 views

CVE-2020-13598

FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h

7.8CVSS6.9AI score0.00057EPSS
CVE
CVE•added 2021/10/05 9:15 p.m.•38 views

CVE-2021-3510

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4

7.5CVSS7.5AI score0.00334EPSS
CVE
CVE•added 2021/05/25 5:15 p.m.•37 views

CVE-2020-13600

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr

7.6CVSS7.1AI score0.00052EPSS
CVE
CVE•added 2023/10/13 12:15 a.m.•23 views

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception.

7.5CVSS7.4AI score0.00186EPSS