Zephyrproject-rtos vulnerabilities
127 CVEs and advisories name Zephyrproject-rtos as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-4259Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver
- CVE-2023-4258bt: mesh: vulnerability in provisioning protocol implementation on provisionee side
- CVE-2023-4265Buffer overflow in Zephyr USB
- CVE-2023-1901HCI send_sync Dangling Semaphore Reference Re-use
- CVE-2023-2234BT HCI host union variant confusion
- CVE-2023-1902HCI Connection Creation Dangling State Reference Re-use
- CVE-2023-0359ipv6: Missing ipv6 nullptr-check in handle_ra_input
- CVE-2023-0779net: shell: Improper input validation
- CVE-2021-3329DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer
- CVE-2023-0397DoS: Invalid Initialization in le_read_buffer_size_complete
- CVE-2023-0396Buffer Overreads in Bluetooth HCI
- CVE-2022-3806Bluetooth HCI Error Handling Double Free
- CVE-2022-0553Possible to retrieve uncrypted firmware image
- CVE-2021-3966Usb bluetooth device ACL read cb buffer overflow
- CVE-2022-2993bt: host: Wrong key validation check
- CVE-2022-2741can: denial-of-service can be triggered by a crafted CAN frame
- CVE-2022-1841Out-of-bound write in tcp_flags
- CVE-2022-1042Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
- CVE-2022-1041Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
- CVE-2021-3435L2CAP: Information leakage in le_ecred_conn_req()
- CVE-2021-3434L2CAP: Stack based buffer overflow in le_ecred_conn_req()
- CVE-2021-3433BT: Invalid channel map in CONNECT_IND results to Deadlock
- CVE-2021-3432BT: Invalid interval in CONNECT_IND leads to Division by Zero
- CVE-2021-3431BT: Assertion failure on repeated LL_FEATURE_REQ
- CVE-2021-3430BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ
- CVE-2021-3861The RNDIS USB device class includes a buffer overflow vulnerability
- CVE-2021-3835Buffer overflow in usb device class
- CVE-2021-3454Truncated L2CAP K-frame causes assertion failure
- CVE-2021-3455Disconnecting L2CAP channel right after invalid ATT request leads freeze
- CVE-2021-3330RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr