Login Request a demo
ZE
Vendor
zephyrproject-rtos
1 product with CVEs on record
50
CVEs
0
On KEV
0
New 30D
Products
ZE
zephyr
zephyrproject-rtos
9.8
50 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-13351
ZE
Zephyr
zephyrproject-rtos
7.5
0%
Jun 25net: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets
CVE-2026-5068
ZE
Zephyr
zephyrproject-rtos
8.8
0%
Jun 9bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data
CVE-2026-5067
ZE
Zephyr
zephyrproject-rtos
9.8
1%
Jun 9Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key
CVE-2026-5066
ZE
Zephyr
zephyrproject-rtos
8.8
0%
Jun 4net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect function
CVE-2026-5589
ZE
Zephyr
zephyrproject-rtos
6.3
0%
Jun 4Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem.
CVE-2026-5071
ZE
Zephyr
zephyrproject-rtos
7.8
0%
May 30can: Local Denial of Service via SocketCAN Send
CVE-2026-5072
ZE
Zephyr
zephyrproject-rtos
6.5
0%
May 22ptp: Potential Denial of Service via PTP Interval Shift
CVE-2026-1681
ZE
Zephyr
zephyrproject-rtos
6.1
0%
May 12net: Stack Overflow with Ping (to own IP Address) via Shell
CVE-2026-1677
ZE
Zephyr
zephyrproject-rtos
5.3
0%
May 11net: TLS 1.2 connections allowed on TLS 1.3 sockets
CVE-2026-5590
ZE
Zephyr
zephyrproject-rtos
5.3
0%
Apr 5net: ip/tcp: Null pointer dereference can be triggered by a race condition
CVE-2026-1679
ZE
Zephyr
zephyrproject-rtos
7.8
0%
Mar 27net: eswifi socket send payload length not bounded
CVE-2026-4179
ZE
Zephyr
zephyrproject-rtos
6.1
0%
Mar 14stm32: usb: Infinite while loop in Interrupt Handler
CVE-2026-0849
ZE
Zephyr
zephyrproject-rtos
6.8
0%
Mar 14crypto: ATAES132A response length allows stack buffer overflow
CVE-2026-1678
ZE
Zephyr
zephyrproject-rtos
9.8
0%
Mar 5dns: memory‑safety issue in the DNS name parser
CVE-2025-12899
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Jan 30net: icmp: Out of bound memory read
CVE-2025-12035
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Dec 15Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP
CVE-2025-9557
ZE
Zephyr
zephyrproject-rtos
7.6
0%
Nov 26Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont
CVE-2025-9558
ZE
Zephyr
zephyrproject-rtos
7.6
0%
Nov 26Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start
CVE-2025-9408
ZE
Zephyr
zephyrproject-rtos
8.1
0%
Nov 11Userspace privilege escalation vulnerability on Cortex M
CVE-2025-12890
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Nov 7Bluetooth: peripheral: Invalid handling of malformed connection request
CVE-2025-10456
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 19Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests
CVE-2025-10458
ZE
Zephyr
zephyrproject-rtos
7.6
0%
Sep 19Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values
CVE-2025-7403
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 19Bluetooth: bt_conn_tx_processor unsafe handling
CVE-2025-10457
ZE
Zephyr
zephyrproject-rtos
8.1
0%
Sep 19Bluetooth: Out-Of-Context le_conn_rsp Handling
CVE-2025-2962
ZE
Zephyr
zephyrproject-rtos
7.5
1%
Jun 24Infinite loop in dns_copy_qname
CVE-2025-1675
ZE
Zephyr
zephyrproject-rtos
9.1
0%
Feb 25Out of bounds read in dns_copy_qname
CVE-2025-1674
ZE
Zephyr
zephyrproject-rtos
8.2
0%
Feb 25Out of bounds read when unpacking DNS answers
CVE-2025-1673
ZE
Zephyr
zephyrproject-rtos
8.2
0%
Feb 25Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
CVE-2024-10395
ZE
Zephyr
zephyrproject-rtos
7.5
0%
Feb 3net: lib: http_server: Buffer Under-read
CVE-2024-8798
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Dec 15Bluetooth: classic: avdtp: missing buffer length check
CVE-2024-11263
ZE
Zephyr
zephyrproject-rtos
8.4
0%
Nov 15arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y
CVE-2024-6444
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Oct 4Bluetooth: ots: missing buffer length check
CVE-2024-6443
ZE
Zephyr
zephyrproject-rtos
6.5
1%
Oct 4zephyr: out-of-bound read in utf8_trunc
CVE-2024-6442
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Oct 4Bluetooth: ASCS Unchecked tailroom of the response buffer
CVE-2024-6259
ZE
Zephyr
zephyrproject-rtos
6.5
1%
Sep 13BT: HCI: adv_ext_report Improper discarding in adv_ext_report
CVE-2024-6137
ZE
Zephyr
zephyrproject-rtos
6.5
1%
Sep 13BT: Classic: SDP OOB access in get_att_search_list
CVE-2024-6135
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 13BT:Classic: Multiple missing buf length checks
CVE-2024-5931
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 13BT: Unchecked user input in bap_broadcast_assistant
CVE-2024-6258
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 13BT: Missing length checks of net_buf in rfcomm_handle_data
CVE-2024-5754
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Sep 13BT: Encryption procedure host vulnerability
CVE-2024-4785
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Aug 19BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero
CVE-2024-3332
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Jul 3bt: host/smp: DoS caused by null pointer dereference
CVE-2024-3077
ZE
Zephyr
zephyrproject-rtos
6.5
0%
Mar 29Bluetooth: integer underflow in gatt_find_info_rsp
CVE-2023-7060
ZE
Zephyr
zephyrproject-rtos
7.5
0%
Mar 15Missing Security Control in Zephyr OS IP Packet Handling
CVE-2023-6881
ZE
Zephyr
zephyrproject-rtos
9.8
0%
Feb 20fs: fuse: buffer overflow vulnerability in the Zephyr FS
CVE-2024-1638
ZE
Zephyr
zephyrproject-rtos
9.1
0%
Feb 19Bluetooth characteristic LESC security requirement not enforced without additional flags
CVE-2023-5779
ZE
Zephyr
zephyrproject-rtos
9.8
0%
Feb 18can: out of bounds in remove_rx_filter function
CVE-2023-6249
ZE
Zephyr
zephyrproject-rtos
9.8
0%
Feb 18ipm: signed to unsigned conversion problem in esp32_ipm_send
CVE-2023-6749
ZE
Zephyr
zephyrproject-rtos
9.8
0%
Feb 18Unchecked user input length in the Zephyr Settings Shell
CVE-2022-2741
ZE
zephyr
zephyrproject-rtos
7.5
1%
Oct 31can: denial-of-service can be triggered by a crafted CAN frame