Filtered by vendor Zephyrproject
Subscriptions
Total
83 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-5139 | 1 Zephyrproject | 1 Zephyr | 2024-01-21 | 7.8 High |
Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver | ||||
CVE-2023-5753 | 1 Zephyrproject | 1 Zephyr | 2024-01-12 | 8.8 High |
Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c | ||||
CVE-2023-4257 | 1 Zephyrproject | 1 Zephyr | 2024-01-12 | 9.8 Critical |
Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows. | ||||
CVE-2023-4265 | 1 Zephyrproject | 1 Zephyr | 2024-01-12 | 6.8 Medium |
Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841 | ||||
CVE-2023-4259 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 8.8 High |
Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code. | ||||
CVE-2023-4260 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 10.0 Critical |
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system. | ||||
CVE-2023-4262 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 10.0 Critical |
Possible buffer overflow in Zephyr mgmt subsystem when asserts are disabled | ||||
CVE-2023-4264 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 9.6 Critical |
Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem. | ||||
CVE-2023-3725 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 9.8 Critical |
Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem | ||||
CVE-2023-4263 | 1 Zephyrproject | 1 Zephyr | 2023-12-22 | 8.8 High |
Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver | ||||
CVE-2023-5184 | 1 Zephyrproject | 1 Zephyr | 2023-12-21 | 8.8 High |
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers. | ||||
CVE-2023-5055 | 1 Zephyrproject | 1 Zephyr | 2023-12-01 | 9.8 Critical |
Possible variant of CVE-2021-3434 in function le_ecred_reconf_req. | ||||
CVE-2023-4424 | 1 Zephyrproject | 1 Zephyr | 2023-11-29 | 8.8 High |
An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device. | ||||
CVE-2023-5563 | 1 Zephyrproject | 1 Zephyr | 2023-10-18 | 7.5 High |
The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception. | ||||
CVE-2023-4258 | 1 Zephyrproject | 1 Zephyr | 2023-09-26 | 6.5 Medium |
In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee. | ||||
CVE-2023-2234 | 1 Zephyrproject | 1 Zephyr | 2023-08-28 | 8.8 High |
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host. | ||||
CVE-2022-0553 | 1 Zephyrproject | 1 Zephyr | 2023-07-21 | 4.6 Medium |
There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily. | ||||
CVE-2023-1902 | 1 Zephyrproject | 1 Zephyr | 2023-07-17 | 8.0 High |
The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer. | ||||
CVE-2023-1901 | 1 Zephyrproject | 1 Zephyr | 2023-07-14 | 8.0 High |
The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer. | ||||
CVE-2023-0359 | 1 Zephyrproject | 1 Zephyr | 2023-07-13 | 7.5 High |
A missing nullptr-check in handle_ra_input can cause a nullptr-deref. |