Zephyrproject vulnerabilities, page 2
299 vulnerabilities
Known vulnerabilities in Zephyrproject products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2021-3330zephyrproject-rtoszephyr+1
EPSS score0.61%
RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456CVE-2021-3432zephyrproject-rtoszephyr+1EPSS score0.89%
Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4CVE-2021-3625zephyrproject-rtoszephyr+1EPSS score2.31%
Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363CVE-2021-3321zephyrproject-rtoszephyr+1EPSS score0.76%
Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99CVE-2021-3581zephyrproject-rtoszephyr+1EPSS score0.35%
Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5CVE-2021-3966zephyrproject-rtoszephyr+1EPSS score0.49%
usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.CVE-2021-3320zephyrproject-rtoszephyr+1EPSS score0.85%
Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7CVE-2021-3329zephyrproject-rtoszephyr+1EPSS score0.62%
Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stackCVE-2021-3454zephyrproject-rtoszephyr+1EPSS score0.96%
Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3CVE-2021-3431zephyrproject-rtoszephyr+1EPSS score0.89%
Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9CVE-2021-3861ubuntuzephyr+2EPSS score0.48%
The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvjCVE-2021-3430zephyrproject-rtoszephyr+1EPSS score0.89%
Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjrCVE-2021-3835ubuntuzephyr+2EPSS score0.74%
Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jfCVE-2021-3319zephyrproject-rtoszephyr+1EPSS score0.88%
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364CVE-2021-3434zephyrproject-rtoszephyr+1EPSS score0.21%
Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrmCVE-2021-3455zephyrproject-rtoszephyr+1EPSS score1.11%
Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vpCVE-2025-2962zephyrproject-rtoszephyr+1EPSS score0.57%
A denial-of-service issue in the dns implemenation could cause an infinite loop.CVE-2025-1674zephyrproject-rtoszephyr+1EPSS score0.37%
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.CVE-2025-1673zephyrproject-rtoszephyr+1EPSS score0.35%
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.CVE-2025-1675zephyrproject-rtoszephyr+1EPSS score0.39%
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.