Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Zephyr
(Zephyrproject)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 88 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-10-13 | CVE-2023-4257 | Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows. | Zephyr | 9.8 | ||
| 2023-10-25 | CVE-2023-5753 | Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c | Zephyr | 8.8 | ||
| 2023-09-26 | CVE-2023-4259 | Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code. | Zephyr | 8.8 | ||
| 2023-09-27 | CVE-2023-4260 | Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system. | Zephyr | 10.0 | ||
| 2023-09-27 | CVE-2023-4264 | Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem. | Zephyr | 9.6 | ||
| 2023-10-06 | CVE-2023-3725 | Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem | Zephyr | 9.8 | ||
| 2023-10-13 | CVE-2023-4263 | Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver | Zephyr | 8.8 | ||
| 2023-09-27 | CVE-2023-5184 | Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers. | Zephyr | 8.8 | ||
| 2023-11-21 | CVE-2023-5055 | Possible variant of CVE-2021-3434 in function le_ecred_reconf_req. | Zephyr | 9.8 | ||
| 2023-11-21 | CVE-2023-4424 | An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device. | Zephyr | 8.8 |