Latest vulnerabilities for "zephyr project manager"

Zephyr Project ManagerZephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

Risk 28

Severity

4.4

First published (updated )

CVE-2025-10490

zephyrproject zephyrOut of bounds read in dns_copy_qname

Risk 66

Severity

9.1

First published (updated )

CVE-2025-1675

zephyrproject zephyrOut of bounds read when unpacking DNS answers

Risk 54

Severity

8.2

First published (updated )

CVE-2025-1674

zephyrproject zephyrOut of bounds read when calling crc16_ansi and strlen in dns_validate_msg

Risk 54

Severity

8.2

First published (updated )

CVE-2025-1673

zephyrproject zephyrarch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y

Risk 77

Severity

9.4

First published (updated )

CVE-2024-11263

zephyrproject zephyrBluetooth: ots: missing buffer length check

Risk 38

Severity

6.5

First published (updated )

CVE-2024-6444

zephyrproject zephyrzephyr: out-of-bound read in utf8_trunc

Risk 38

Severity

6.5

First published (updated )

CVE-2024-6443

zephyrproject zephyrBluetooth: ASCS Unchecked tailroom of the response buffer

Risk 38

Severity

6.5

First published (updated )

CVE-2024-6442

zephyrproject zephyrBT:Classic: Multiple missing buf length checks

Risk 58

Severity

7.6

First published (updated )

CVE-2024-6135

Zephyr-one Zephyr Project Manager WordpressZephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

Risk 43

Severity

8.1

EPSS

0.06%

First published (updated )

CVE-2024-7624

zephyrproject zephyrbt: host/smp: DoS caused by null pointer dereference

Risk 38

Severity

6.5

First published (updated )

CVE-2024-3332

zephyrproject zephyrBluetooth: integer underflow in gatt_find_info_rsp

Risk 39

Severity

6.8

EPSS

0.04%

First published (updated )

CVE-2024-3077

Zephyr Project Zephyr OSMissing Security Control in Zephyr OS IP Packet Handling

Risk 64

Severity

8.6

First published (updated )

CVE-2023-7060

Zephyr FSfs: fuse: buffer overflow vulnerability in the Zephyr FS

Risk 86

Severity

9.8

First published (updated )

CVE-2023-6881

zephyrproject zephyrcan: out of bounds in remove_rx_filter function

Risk 86

Severity

9.8

First published (updated )

CVE-2023-5779

zephyrproject zephyripm: signed to unsigned conversion problem in esp32_ipm_send

Risk 86

Severity

9.8

First published (updated )

CVE-2023-6249

Zephyr Settings ShellUnchecked user input length in the Zephyr Settings Shell

Risk 86

Severity

9.8

First published (updated )

CVE-2023-6749

zephyrproject zephyrL2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()

Risk 86

Severity

9.8

First published (updated )

CVE-2023-5055

zephyrproject zephyrbt: hci: DoS and possible RCE

Risk 79

Severity

8.8

First published (updated )

CVE-2023-4424

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Risk 69

Severity

7.8

First published (updated )

CVE-2023-5139

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

Risk 56

Severity

8.8

EPSS

0.23%

First published (updated )

CVE-2023-5753

zephyrproject zephyrUnchecked user input length in the Zephyr WiFi shell module

Risk 86

Severity

9.8

First published (updated )

CVE-2023-4257

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

Risk 79

Severity

8.8

First published (updated )

CVE-2023-4263

zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when…

Risk 31

Severity

7.5

EPSS

0.19%

First published (updated )

CVE-2023-5563

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr CANbus subsystem

Risk 86

Severity

9.8

First published (updated )

CVE-2023-3725

zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

Risk 72

Severity

8.8

First published (updated )

CVE-2023-5184

zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

Risk 87

Severity

10

First published (updated )

CVE-2023-4260

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

Risk 81

Severity

9.6

First published (updated )

CVE-2023-4264

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Mgmt subsystem

Risk 87

Severity

10

First published (updated )

CVE-2023-4262

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

Risk 79

Severity

8.8

First published (updated )

CVE-2023-4259

Trending

Versions

Zephyr Project ManagerZephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

zephyrproject zephyrOut of bounds read in dns_copy_qname

zephyrproject zephyrOut of bounds read when unpacking DNS answers

zephyrproject zephyrOut of bounds read when calling crc16_ansi and strlen in dns_validate_msg

zephyrproject zephyrarch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y

Don't miss critical vulnerabilities

zephyrproject zephyrBluetooth: ots: missing buffer length check

zephyrproject zephyrzephyr: out-of-bound read in utf8_trunc

zephyrproject zephyrBluetooth: ASCS Unchecked tailroom of the response buffer

zephyrproject zephyrBT:Classic: Multiple missing buf length checks

Zephyr-one Zephyr Project Manager WordpressZephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

Don't miss critical vulnerabilities

zephyrproject zephyrbt: host/smp: DoS caused by null pointer dereference

zephyrproject zephyrBluetooth: integer underflow in gatt_find_info_rsp

Zephyr Project Zephyr OSMissing Security Control in Zephyr OS IP Packet Handling

Zephyr FSfs: fuse: buffer overflow vulnerability in the Zephyr FS

zephyrproject zephyrcan: out of bounds in remove_rx_filter function

Don't miss critical vulnerabilities

zephyrproject zephyripm: signed to unsigned conversion problem in esp32_ipm_send

Zephyr Settings ShellUnchecked user input length in the Zephyr Settings Shell

zephyrproject zephyrL2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()

zephyrproject zephyrbt: hci: DoS and possible RCE

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

Don't miss critical vulnerabilities

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

zephyrproject zephyrUnchecked user input length in the Zephyr WiFi shell module

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when…

zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr CANbus subsystem

Don't miss critical vulnerabilities

zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Mgmt subsystem

zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

Don't miss critical vulnerabilities

Company

Resources

Contact