Zephyrproject-rtos vulnerabilities
127 CVEs and advisories name Zephyrproject-rtos as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-11263arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y
- CVE-2024-6444Bluetooth: ots: missing buffer length check
- CVE-2024-6443zephyr: out-of-bound read in utf8_trunc
- CVE-2024-6442Bluetooth: ASCS Unchecked tailroom of the response buffer
- CVE-2024-6259BT: HCI: adv_ext_report Improper discarding in adv_ext_report
- CVE-2024-6137BT: Classic: SDP OOB access in get_att_search_list
- CVE-2024-6135BT:Classic: Multiple missing buf length checks
- CVE-2024-5931BT: Unchecked user input in bap_broadcast_assistant
- CVE-2024-6258BT: Missing length checks of net_buf in rfcomm_handle_data
- CVE-2024-5754BT: Encryption procedure host vulnerability
- CVE-2024-4785BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero
- CVE-2024-3332bt: host/smp: DoS caused by null pointer dereference
- CVE-2024-3077Bluetooth: integer underflow in gatt_find_info_rsp
- CVE-2023-7060Missing Security Control in Zephyr OS IP Packet Handling
- CVE-2023-6881fs: fuse: buffer overflow vulnerability in the Zephyr FS
- CVE-2024-1638Bluetooth characteristic LESC security requirement not enforced without additional flags
- CVE-2023-5779can: out of bounds in remove_rx_filter function
- CVE-2023-6249ipm: signed to unsigned conversion problem in esp32_ipm_send
- CVE-2023-6749Unchecked user input length in the Zephyr Settings Shell
- CVE-2023-5055L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
- CVE-2023-4424bt: hci: DoS and possible RCE
- CVE-2023-5139Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver
- CVE-2023-5753Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
- CVE-2023-4257Unchecked user input length in the Zephyr WiFi shell module
- CVE-2023-4263Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver
- CVE-2023-5563The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECO
- CVE-2023-3725Potential buffer overflow vulnerability in the Zephyr CANbus subsystem
- CVE-2023-5184Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
- CVE-2023-4260Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
- CVE-2023-4264Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem