Zephyrproject: Security Vulnerabilities
Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem
CVSS Score
7.6
EPSS Score
0.006
Published
2023-10-06
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
CVSS Score
7.0
EPSS Score
0.003
Published
2023-09-27
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.
CVSS Score
6.3
EPSS Score
0.003
Published
2023-09-27
Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-09-27
Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-09-26
In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.
CVSS Score
8.6
EPSS Score
0.002
Published
2023-09-25
Potential buffer overflow vulnerabilities in the following locations:
https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359 https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_posix.c#L359
https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis... https://github.com/zephyrproject-rtos/zephyr/blob/main/subsys/usb/device/class/netusb/function_rndis.c#L841
CVSS Score
6.4
EPSS Score
0.003
Published
2023-08-12
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.
CVSS Score
6.8
EPSS Score
0.0
Published
2023-07-10
The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.
CVSS Score
5.9
EPSS Score
0.002
Published
2023-07-10
The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.
CVSS Score
5.9
EPSS Score
0.002
Published
2023-07-10