ZE
Product
zephyr
by zephyrproject-rtos · last CVE Jun 25, 2026
85
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 36Medium 32Low 2
Watch

Add zephyr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4260
10.0
1%
Sep 26
Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
Affected: through 3.4
CVE-2026-5067
9.8
1%
Jun 9
Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key
Affected: 3.7.0 before 4.3.1
CVE-2026-1678
9.8
0%
Mar 5
dns: memory‑safety issue in the DNS name parser
Affected: before 3.7.2; 4.0.0 before 4.2.2; 4.3.0 before 4.3.1
CVE-2023-6881
9.8
0%
Feb 20
fs: fuse: buffer overflow vulnerability in the Zephyr FS
Affected: through 3.5
CVE-2023-5779
9.8
0%
Feb 18
can: out of bounds in remove_rx_filter function
Affected: through 3.5
CVE-2023-6249
9.8
0%
Feb 18
ipm: signed to unsigned conversion problem in esp32_ipm_send
Affected: through 3.5
CVE-2023-6749
9.8
0%
Feb 18
Unchecked user input length in the Zephyr Settings Shell
Affected: through 3.5
CVE-2023-5055
9.8
1%
Nov 21
L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
Affected: through 3.4
CVE-2023-4257
9.8
1%
Oct 13
Unchecked user input length in the Zephyr WiFi shell module
Affected: through 3.4
CVE-2023-3725
9.8
1%
Oct 6
Potential buffer overflow vulnerability in the Zephyr CANbus subsystem
Affected: through 3.4
CVE-2022-3806
9.8
1%
Jan 19
Bluetooth HCI Error Handling Double Free
Affected: through v3.2
CVE-2022-2993
9.8
1%
Dec 9
bt: host: Wrong key validation check
Affected: through v3.1
CVE-2023-4264
9.6
1%
Sep 26
Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
Affected: through 3.4
CVE-2025-1675
9.1
0%
Feb 25
Out of bounds read in dns_copy_qname
Affected: before 3.7.2; 4.0.0 before 4.1.0
CVE-2024-1638
9.1
0%
Feb 19
Bluetooth characteristic LESC security requirement not enforced without additional flags
Affected: through 3.5
Showing 15