Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Zephyr
(Zephyrproject)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 88 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-09-13 | CVE-2024-5754 | BT: Encryption procedure host vulnerability | Zephyr | 6.5 | ||
| 2024-09-13 | CVE-2024-6258 | BT: Missing length checks of net_buf in rfcomm_handle_data | Zephyr | 6.5 | ||
| 2024-09-13 | CVE-2024-5931 | BT: Unchecked user input in bap_broadcast_assistant | Zephyr | 6.5 | ||
| 2024-09-13 | CVE-2024-6135 | BT:Classic: Multiple missing buf length checks | Zephyr | 6.5 | ||
| 2024-09-13 | CVE-2024-6137 | BT: Classic: SDP OOB access in get_att_search_list | Zephyr | 6.5 | ||
| 2024-09-13 | CVE-2024-6259 | BT: HCI: adv_ext_report Improper discarding in adv_ext_report | Zephyr | 6.5 | ||
| 2023-10-26 | CVE-2023-5139 | Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver | Zephyr | 7.8 | ||
| 2023-08-12 | CVE-2023-4265 | Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841 | Zephyr | 6.8 | ||
| 2023-10-13 | CVE-2023-4257 | Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows. | Zephyr | 9.8 | ||
| 2023-10-25 | CVE-2023-5753 | Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c | Zephyr | 8.8 |