What is CVE-2021-3581?

CVE-2021-3581 is a high-severity vulnerability in Zephyrproject Zephyr, classified under Buffer Access with Incorrect Length Value. CVSS score: 7.0/10. Published 2021-10-05.

How severe is CVE-2021-3581?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Zephyrproject Zephyr

CVE-2021-3581

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5

EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Zephyrproject Zephyr
Zephyrproject-rtos Zephyr — versions >=2.5.0

Weakness classification (CWE)

CWE-805 — Buffer Access with Incorrect Length Value
CWE-1284 — Improper Validation of Specified Quantity in Input

References

vulnerabilities@zephyrproject.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-3581?: CVE-2021-3581 is a high-severity vulnerability in Zephyrproject Zephyr, classified under Buffer Access with Incorrect Length Value. CVSS score: 7.0/10. Published 2021-10-05.
How severe is CVE-2021-3581?: High severity. CVSS v3 base score is 7.0 out of 10.