Zephyrproject-rtos vulnerabilities
127 CVEs and advisories name Zephyrproject-rtos as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-3323Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr
- CVE-2021-3322Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr
- CVE-2021-3321Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal
- CVE-2021-3625Buffer overflow in Zephyr USB DFU DNLOAD
- CVE-2021-3581Buffer Access with Incorrect Length Value in zephyr
- CVE-2021-3510Zephyr JSON decoder incorrectly decodes array of array
- CVE-2021-3436BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
- CVE-2021-3319DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses
- CVE-2021-3320Type Confusion in 802154 ACK Frames Handling
- CVE-2020-13603Integer Overflow in memory allocating functions
- CVE-2020-13602Remote Denial of Service in LwM2M do_write_op_tlv
- CVE-2020-13601Possible read out of bounds in dns read
- CVE-2020-13600Malformed SPI in response for eswifi can corrupt kernel memory
- CVE-2020-13599Security problem with settings and littlefs
- CVE-2020-13598FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat
- CVE-2020-10072Improper Handling of Insufficient Permissions or Privileges in zephyr
- CVE-2020-10069Zephyr Bluetooth unchecked packet data results in denial of service
- CVE-2020-10066Incorrect Error Handling in Bluetooth HCI core
- CVE-2020-10065Missing Size Checks in Bluetooth HCI over SPI
- CVE-2020-10064Improper Input Frame Validation in ieee802154 Processing
- CVE-2020-10071Insufficient publish message length validation in MQTT
- CVE-2020-10070MQTT buffer overflow on receive buffer
- CVE-2020-10068Zephyr Bluetooth DLE duplicate requests vulnerability
- CVE-2020-10063Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow
- CVE-2020-10062Packet length decoding error in MQTT
- CVE-2020-10061Error handling invalid packet sequence
- CVE-2020-10067Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory
- CVE-2020-10060UpdateHub Might Dereference An Uninitialized Pointer
- CVE-2020-10059UpdateHub Module Explicitly Disables TLS Verification
- CVE-2020-10058Multiple Syscalls In kscan Subsystem Performs No Argument Validation