Vulnerabilidades em zephyrproject
206 resultadosAnálise Vexday
O Zephyr Project apresenta panorama atípico: 40 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descoberta recente concentrada em um curto período. Nenhuma está sob exploração ativa (KEV) e não há críticas por CVSS, sugerindo severidade moderada; a fraqueza dominante (CWE-416 - use-after-free) aponta para falhas de gerenciamento de memória, típicas em projetos de firmware/RTOS. O risco imediato de exploração é baixo, mas o volume recente exige revisão arquitetural do código.
CVE-2026-16515MEDIUMICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stackEPSS 0.2%CVE-2026-14366MEDIUMSiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pktEPSS 0.2%CVE-2026-13213MEDIUMBluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_registerEPSS 0.2%CVE-2026-10660MEDIUMShared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruptionEPSS 0.2%CVE-2026-12363MEDIUMOut-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0EPSS 0.2%CVE-2026-13481MEDIUMOut-of-bounds read in PTP management TLV TIME parsing in Zephyr net PTPEPSS 0.2%CVE-2026-7007MEDIUMDivision by zero in Zephyr ext2 superblock parsing allows DoS via crafted filesystem imageEPSS 0.2%CVE-2026-10683LOWDesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)EPSS 0.2%CVE-2026-18747MEDIUMInteger underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds readEPSS 0.2%CVE-2026-85034MEDIUMOut-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribersEPSS 0.2%CVE-2026-10663MEDIUMUse-after-free / double-free of the root USB device in the experimental USB host stackEPSS 0.2%CVE-2026-12519MEDIUMOut-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsingEPSS 0.2%CVE-2026-13480LOWOut-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handlerEPSS 0.2%CVE-2026-17050MEDIUMDouble free of the USB host configuration descriptor when device enumeration failsEPSS 0.2%CVE-2026-10639MEDIUMUse-after-free reading `net_pkt_iface()` of a sent ICMPv4 echo-reply packet in `icmpv4_handle_echo_request()`EPSS 0.2%CVE-2026-10668LOWHost-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driverEPSS 0.2%CVE-2026-12629MEDIUMPL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of serviceEPSS 0.2%CVE-2026-15923MEDIUMInfinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_sizeEPSS 0.2%CVE-2026-18416LOWOut-of-bounds read in CoAP well-known-core Uri-Query href matching (match_path_uri)EPSS 0.2%CVE-2026-16148MEDIUMKernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work itemEPSS 0.2%