ZE
Product
zephyr
85
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 36Medium 32Low 2
Watch
Add zephyr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4260 | 10.0 | Sep 26 | Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem Affected: through 3.4 |
| CVE-2026-5067 | 9.8 | Jun 9 | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key Affected: 3.7.0 before 4.3.1 |
| CVE-2026-1678 | 9.8 | Mar 5 | dns: memory‑safety issue in the DNS name parser Affected: before 3.7.2; 4.0.0 before 4.2.2; 4.3.0 before 4.3.1 |
| CVE-2023-6881 | 9.8 | Feb 20 | fs: fuse: buffer overflow vulnerability in the Zephyr FS Affected: through 3.5 |
| CVE-2023-5779 | 9.8 | Feb 18 | can: out of bounds in remove_rx_filter function Affected: through 3.5 |
| CVE-2023-6249 | 9.8 | Feb 18 | ipm: signed to unsigned conversion problem in esp32_ipm_send Affected: through 3.5 |
| CVE-2023-6749 | 9.8 | Feb 18 | Unchecked user input length in the Zephyr Settings Shell Affected: through 3.5 |
| CVE-2023-5055 | 9.8 | Nov 21 | L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req() Affected: through 3.4 |
| CVE-2023-4257 | 9.8 | Oct 13 | Unchecked user input length in the Zephyr WiFi shell module Affected: through 3.4 |
| CVE-2023-3725 | 9.8 | Oct 6 | Potential buffer overflow vulnerability in the Zephyr CANbus subsystem Affected: through 3.4 |
| CVE-2022-3806 | 9.8 | Jan 19 | Bluetooth HCI Error Handling Double Free Affected: through v3.2 |
| CVE-2022-2993 | 9.8 | Dec 9 | bt: host: Wrong key validation check Affected: through v3.1 |
| CVE-2023-4264 | 9.6 | Sep 26 | Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem Affected: through 3.4 |
| CVE-2025-1675 | 9.1 | Feb 25 | Out of bounds read in dns_copy_qname Affected: before 3.7.2; 4.0.0 before 4.1.0 |
| CVE-2024-1638 | 9.1 | Feb 19 | Bluetooth characteristic LESC security requirement not enforced without additional flags Affected: through 3.5 |
Showing 15
