Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 350

Export CSV
CVE-2021-3454

Truncated L2CAP K-frame causes assertion failure

Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3436

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0, >= 2.5.0 contain Use of Multiple Resources with Duplicate Identifier (CWE-694). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3435

L2CAP: Information leakage in le_ecred_conn_req()

Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3434

L2CAP: Stack based buffer overflow in le_ecred_conn_req()

Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3433

BT: Invalid channel map in CONNECT_IND results to Deadlock

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptional Conditions (CWE-703). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3432

BT: Invalid interval in CONNECT_IND leads to Division by Zero

Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3431

BT: Assertion failure on repeated LL_FEATURE_REQ

Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3430

BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ

Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3330

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3323

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3322

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3321

Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal

Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3320

Type Confusion in 802154 ACK Frames Handling

Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2021-3319

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13603

Integer Overflow in memory allocating functions

Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45

CVSS 3.1 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13602

Remote Denial of Service in LwM2M do_write_op_tlv

Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13601

Possible read out of bounds in dns read

Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13600

Malformed SPI in response for eswifi can corrupt kernel memory

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13599

Security problem with settings and littlefs

Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr
CVE-2020-13598

FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat

FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zephyrproject
Products
Zephyr