zephyrproject-rtos Zephyr

• CVE-2023-4424 High 8.3 bt: hci: DoS and possible RCE 0.4%
• CVE-2023-5139 Medium 4.4 Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver 0.5%
• CVE-2023-5753 Medium 6.3 Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem 1.0%
• CVE-2023-4257 High 7.6 Unchecked user input length in the Zephyr WiFi shell module 1.1%
• CVE-2023-4263 High 7.6 Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver 0.5%
• CVE-2023-5563 High 7.1 The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, ca 0.5%
• CVE-2023-3725 High 7.6 Potential buffer overflow vulnerability in the Zephyr CANbus subsystem 1.3%
• CVE-2023-5184 High 7.0 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver 0.4%
• CVE-2023-4260 Medium 6.3 Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem 0.9%
• CVE-2023-4264 High 7.1 Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem 1.1%
• CVE-2023-4259 High 7.1 Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver 0.8%
• CVE-2023-4258 High 8.6 bt: mesh: vulnerability in provisioning protocol implementation on provisionee side 0.6%
• CVE-2023-4265 Medium 6.4 Buffer overflow in Zephyr USB 0.8%
• CVE-2023-1901 Medium 5.9 HCI send_sync Dangling Semaphore Reference Re-use 0.6%
• CVE-2023-2234 Medium 6.8 BT HCI host union variant confusion 0.5%
• CVE-2023-1902 Medium 5.9 HCI Connection Creation Dangling State Reference Re-use 0.6%
• CVE-2023-0359 Medium 5.9 ipv6: Missing ipv6 nullptr-check in handle_ra_input 0.9%
• CVE-2023-0779 Medium 6.7 net: shell: Improper input validation 0.5%
• CVE-2021-3329 Critical 9.6 DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer 0.6%
• CVE-2023-0397 Critical 9.6 DoS: Invalid Initialization in le_read_buffer_size_complete 0.5%
• CVE-2022-3806 Critical 9.8 Bluetooth HCI Error Handling Double Free 1.0%
• CVE-2023-0396 Medium 6.8 Buffer Overreads in Bluetooth HCI 0.4%
• CVE-2021-3966 Critical 9.6 Usb bluetooth device ACL read cb buffer overflow 0.5%
• CVE-2022-0553 Medium 6.5 Possible to retrieve uncrypted firmware image 0.3%
• CVE-2022-2993 High 8.6 bt: host: Wrong key validation check 0.6%
• CVE-2022-2741 High 8.2 can: denial-of-service can be triggered by a crafted CAN frame 0.7%
• CVE-2022-1841 High 7.2 Out-of-bound write in tcp_flags 0.6%
• CVE-2022-1042 High 8.2 Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning 0.8%
• CVE-2022-1041 High 8.2 Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning 0.9%
• CVE-2021-3435 Medium 4.0 L2CAP: Information leakage in le_ecred_conn_req() 0.2%
• CVE-2021-3434 Medium 4.9 L2CAP: Stack based buffer overflow in le_ecred_conn_req() 0.2%
• CVE-2021-3433 Medium 4.0 BT: Invalid channel map in CONNECT_IND results to Deadlock 0.2%
• CVE-2021-3432 Medium 4.3 BT: Invalid interval in CONNECT_IND leads to Division by Zero 0.9%
• CVE-2021-3431 Medium 4.3 BT: Assertion failure on repeated LL_FEATURE_REQ 0.9%
• CVE-2021-3430 Medium 6.5 BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ 0.9%
• CVE-2021-3861 High 8.2 The RNDIS USB device class includes a buffer overflow vulnerability 0.5%
• CVE-2021-3835 High 8.2 Buffer overflow in usb device class 0.7%
• CVE-2021-3454 Medium 4.3 Truncated L2CAP K-frame causes assertion failure 1.0%
• CVE-2021-3455 Medium 4.3 Disconnecting L2CAP channel right after invalid ATT request leads freeze 1.1%
• CVE-2021-3330 High 7.1 RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr 0.6%
• CVE-2021-3323 High 8.3 Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr 0.9%
• CVE-2021-3322 Medium 6.5 Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr 0.5%
• CVE-2021-3321 High 7.5 Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal 0.8%
• CVE-2021-3625 Critical 9.6 Buffer overflow in Zephyr USB DFU DNLOAD 2.3%
• CVE-2021-3581 High 7.0 Buffer Access with Incorrect Length Value in zephyr 0.3%
• CVE-2021-3510 High 7.5 Zephyr JSON decoder incorrectly decodes array of array 1.0%
• CVE-2021-3436 Medium 4.3 BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known 1.0%
• CVE-2021-3319 Medium 6.5 DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses 0.9%
• CVE-2021-3320 Medium 5.9 Type Confusion in 802154 ACK Frames Handling 0.8%
• CVE-2020-13603 Medium 6.9 Integer Overflow in memory allocating functions 0.2%