Vulnerabilities in zephyrproject-rtos
127 resultsCVE-2020-10061HIGHError handling invalid packet sequenceEPSS 0.6%CVE-2024-6259HIGHBT: HCI: adv_ext_report Improper discarding in adv_ext_reportEPSS 0.6%CVE-2024-6443MEDIUMzephyr: out-of-bound read in utf8_truncEPSS 0.6%CVE-2023-1901MEDIUMHCI send_sync Dangling Semaphore Reference Re-useEPSS 0.6%CVE-2023-1902MEDIUMHCI Connection Creation Dangling State Reference Re-useEPSS 0.6%CVE-2022-2993HIGHbt: host: Wrong key validation checkEPSS 0.6%CVE-2022-1841HIGHOut-of-bound write in tcp_flagsEPSS 0.6%CVE-2025-2962HIGHInfinite loop in dns_copy_qnameEPSS 0.6%CVE-2023-4258HIGHbt: mesh: vulnerability in provisioning protocol implementation on provisionee sideEPSS 0.6%CVE-2024-6137HIGHBT: Classic: SDP OOB access in get_att_search_listEPSS 0.5%CVE-2021-3322MEDIUMUnexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in ZephyrEPSS 0.5%CVE-2023-4263HIGHPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driverEPSS 0.5%CVE-2023-5563HIGHThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOEPSS 0.5%CVE-2023-0779MEDIUMnet: shell: Improper input validationEPSS 0.5%CVE-2021-3966CRITICALUsb bluetooth device ACL read cb buffer overflowEPSS 0.5%CVE-2023-2234MEDIUMBT HCI host union variant confusionEPSS 0.5%CVE-2020-10068MEDIUMZephyr Bluetooth DLE duplicate requests vulnerabilityEPSS 0.5%CVE-2023-7060HIGHMissing Security Control in Zephyr OS IP Packet HandlingEPSS 0.5%CVE-2020-10065LOWMissing Size Checks in Bluetooth HCI over SPIEPSS 0.5%CVE-2026-13351HIGHnet: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packetsEPSS 0.5%