Zephyrproject: >> Zephyr Security Vulnerabilities
Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c
CVSS Score
6.3
EPSS Score
0.002
Published
2023-10-25
Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.
CVSS Score
7.6
EPSS Score
0.004
Published
2023-10-13
Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver
CVSS Score
7.6
EPSS Score
0.001
Published
2023-10-13
The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, causing a fatal exception.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-10-13
Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem
CVSS Score
7.6
EPSS Score
0.006
Published
2023-10-06
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
CVSS Score
7.0
EPSS Score
0.003
Published
2023-09-27
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.
CVSS Score
6.3
EPSS Score
0.003
Published
2023-09-27
Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-09-27
Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.
CVSS Score
7.1
EPSS Score
0.002
Published
2023-09-26
In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.
CVSS Score
8.6
EPSS Score
0.002
Published
2023-09-25