Zephyrproject: >> Zephyr >> 4.1.0 Security Vulnerabilities
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.
CVSS Score
4.3
EPSS Score
0.004
Published
2025-09-19
A denial-of-service issue in the dns implemenation could cause an infinite loop.
CVSS Score
7.5
EPSS Score
0.005
Published
2025-06-24
Page 6