Zephyrproject
Page 3 of 3 — Zephyrproject CVEs from a corpus of 249, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3432 | Medium | 4.3 | 2022-06-28 | Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/ze… |
CVE-2021-3431 | Medium | 4.3 | 2022-06-28 | Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com… |
CVE-2021-3430 | Medium | 6.5 | 2022-06-28 | Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://gi… |
CVE-2021-3861 | High | 8.2 | 2022-02-07 | The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more informati… |
CVE-2021-3835 | High | 8.2 | 2022-02-07 | Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephy… |
CVE-2021-3455 | Medium | 4.3 | 2021-10-19 | Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more informa… |
CVE-2021-3454 | Medium | 4.3 | 2021-10-19 | Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Re… |
CVE-2021-3330 | High | 7.1 | 2021-10-12 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-o… |
CVE-2021-3323 | High | 8.3 | 2021-10-12 | Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more… |
CVE-2021-3322 | Medium | 6.5 | 2021-10-12 | Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more infor… |
CVE-2021-3321 | High | 7.5 | 2021-10-12 | Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680)… |
CVE-2021-3625 | Critical | 9.6 | 2021-10-05 | Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/… |
CVE-2021-3581 | High | 7.0 | 2021-10-05 | Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more informati… |
CVE-2021-3510 | High | 7.5 | 2021-10-05 | Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-5… |
CVE-2021-3436 | Medium | 4.3 | 2021-10-05 | BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0… |
CVE-2021-3319 | Medium | 6.5 | 2021-10-05 | DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to… |
CVE-2021-3320 | Medium | 5.9 | 2021-05-25 | Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.co… |
CVE-2020-13603 | Medium | 6.9 | 2021-05-25 | Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, se… |
CVE-2020-13602 | Medium | 4.0 | 2021-05-25 | Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit C… |
CVE-2020-13601 | Critical | 9.0 | 2021-05-25 | Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com… |
CVE-2020-13600 | High | 7.0 | 2021-05-25 | Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more info… |
CVE-2020-13599 | Low | 3.3 | 2021-05-25 | Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see htt… |
CVE-2020-13598 | Medium | 6.3 | 2021-05-25 | FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE… |
CVE-2020-10072 | Medium | 5.9 | 2021-05-25 | Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissi… |
CVE-2020-10069 | Medium | 4.3 | 2021-05-25 | Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). F… |
CVE-2020-10066 | Low | 2.5 | 2021-05-25 | Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see htt… |
CVE-2020-10065 | Low | 3.8 | 2021-05-25 | Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For… |
CVE-2020-10064 | High | 8.3 | 2021-05-25 | Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffe… |
CVE-2020-10071 | Critical | 9.0 | 2020-06-05 | The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code exe… |
CVE-2020-10070 | Critical | 9.0 | 2020-06-05 | In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: z… |
CVE-2020-10068 | Medium | 5.1 | 2020-06-05 | In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issu… |
CVE-2020-10063 | Medium | 6.8 | 2020-06-05 | A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproje… |
CVE-2020-10062 | Critical | 9.0 | 2020-06-05 | An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue… |
CVE-2020-10061 | High | 8.1 | 2020-06-05 | Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr… |
CVE-2020-10067 | High | 7.5 | 2020-05-11 | A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the und… |
CVE-2020-10060 | High | 8.0 | 2020-05-11 | In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places. If the JSON contained less… |
CVE-2020-10059 | Medium | 4.8 | 2020-05-11 | The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures… |
CVE-2020-10058 | High | 7.8 | 2020-05-11 | Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges… |
CVE-2020-10028 | High | 7.8 | 2020-05-11 | Multiple syscalls with insufficient argument validation See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. versio… |
CVE-2020-10027 | High | 7.8 | 2020-05-11 | An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephy… |
CVE-2020-10024 | High | 7.8 | 2020-05-11 | The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user… |
CVE-2020-10023 | Medium | 6.9 | 2020-05-11 | The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in deni… |
CVE-2020-10022 | Critical | 9.0 | 2020-05-11 | A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in… |
CVE-2020-10021 | High | 8.1 | 2020-05-11 | Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024, NCC-ZEP-025, NCC-ZEP-026 This issue affects: zephyrprojec… |
CVE-2020-10019 | High | 8.1 | 2020-05-11 | USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. This could be used by a malicious USB host… |
CVE-2017-14202 | High | 7.8 | 2019-08-29 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user… |
CVE-2017-14201 | High | 7.8 | 2019-08-29 | Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This… |
CVE-2017-14199 | Critical | 9.8 | 2019-04-12 | A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0. |
CVE-2018-1000800 | Critical | 9.8 | 2018-09-06 | zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (er… |