zephyrproject records

194 published records for vendor zephyrproject.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 6
With a fix record: 46.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

194 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-10071No exploit	Insufficient publish message length validation in MQTTzephyrproject · zephyr · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	3.3%	Jun 5, 2020
40Plan	CVE-2020-10062No exploit	Packet length decoding error in MQTTzephyrproject · zephyr · CWE-193 pre-auth RCE	Critical9.8	—	2.8%	Jun 5, 2020
40Plan	CVE-2020-10070No exploit	MQTT buffer overflow on receive bufferzephyrproject · zephyr · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	2.8%	Jun 5, 2020
40Plan	CVE-2020-10022No exploit	UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Arrayzephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical9.8	—	2.3%	May 11, 2020
40Plan	CVE-2021-3625Proof of concept	Buffer overflow in Zephyr USB DFU DNLOADzephyrproject · zephyr · CWE-122 Pre-auth Memory safety	Critical9.8	—	2.3%	Oct 5, 2021
40Plan	CVE-2017-14199No exploit	A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.zephyrproject · zephyr · CWE-119 Pre-auth Memory safety	Critical9.8	—	1.7%	Apr 12, 2019
40Plan	CVE-2023-4260No exploit	Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystemzephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical10.0	—	0.8%	Sep 27, 2023
39Monitor	CVE-2018-1000800No exploit	zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result inzephyrproject · zephyr · CWE-476 Pre-auth Memory safety	Critical9.8	—	1.6%	Sep 6, 2018
39Monitor	CVE-2023-3725No exploit	Potential buffer overflow vulnerability in the Zephyr CANbus subsystemzephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.2%	Oct 6, 2023
39Monitor	CVE-2023-4257No exploit	Unchecked user input length in the Zephyr WiFi shell modulezephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.0%	Oct 13, 2023
39Monitor	CVE-2022-3806No exploit	Bluetooth HCI Error Handling Double Freezephyrproject · zephyr · CWE-415 Pre-auth Memory safety	Critical9.8	—	1.0%	Jan 24, 2023
39Monitor	CVE-2020-13601No exploit	Possible read out of bounds in dns readzephyrproject · zephyr · CWE-125 Pre-auth Memory safety	Critical9.8	—	0.9%	May 25, 2021
39Monitor	CVE-2021-3323No exploit	Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyrzephyrproject · zephyr · CWE-191 Pre-auth Memory safety	Critical9.8	—	0.9%	Oct 12, 2021
39Monitor	CVE-2021-3319No exploit	DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresseszephyrproject · zephyr · CWE-476 Pre-auth Memory safety	Critical9.8	—	0.8%	Oct 5, 2021
39Monitor	CVE-2020-10064No exploit	Improper Input Frame Validation in ieee802154 Processingzephyrproject · zephyr · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.8%	May 25, 2021
39Monitor	CVE-2023-5055No exploit	L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()zephyrproject · zephyr · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.7%	Nov 21, 2023
39Monitor	CVE-2026-10666No exploit	Stack buffer overflow in `net_ipaddr_parse()` IPv4 address-with-port parsing in `subsys/net/ip/utils.c`zephyrproject · zephyr · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.6%	Jul 12, 2026
39Monitor	CVE-2026-5067No exploit	Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Keyzephyrproject · zephyr · CWE-170 Pre-auth	Critical9.8	—	0.6%	Jun 9, 2026
39Monitor	CVE-2022-2993No exploit	bt: host: Wrong key validation checkzephyrproject · zephyr · CWE-670 Pre-auth	Critical9.8	—	0.5%	Dec 9, 2022
39Monitor	CVE-2023-6749No exploit	Unchecked user input length in the Zephyr Settings Shellzephyrproject · zephyr · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Feb 18, 2024
39Monitor	CVE-2023-6249No exploit	ipm: signed to unsigned conversion problem in esp32_ipm_sendzephyrproject · zephyr · CWE-704 Pre-auth	Critical9.8	—	0.4%	Feb 18, 2024
39Monitor	CVE-2023-6881No exploit	fs: fuse: buffer overflow vulnerability in the Zephyr FSzephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical9.8	—	0.4%	Feb 28, 2024
39Monitor	CVE-2023-5779No exploit	can: out of bounds in remove_rx_filter functionzephyrproject · zephyr · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.4%	Feb 18, 2024
39Monitor	CVE-2026-1678No exploit	dns: memory‑safety issue in the DNS name parserzephyrproject · zephyr · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.3%	Mar 5, 2026
38Monitor	CVE-2023-4264No exploit	Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemzephyrproject · zephyr · CWE-120 Pre-auth Memory safety	Critical9.6	—	1.0%	Sep 27, 2023

CVE-2020-10071
40Plan
Insufficient publish message length validation in MQTT
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
zephyrproject · zephyrJun 5, 2020
CVE-2020-10062
40Plan
Packet length decoding error in MQTT
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
zephyrproject · zephyrJun 5, 2020
CVE-2020-10070
40Plan
MQTT buffer overflow on receive buffer
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
zephyrproject · zephyrJun 5, 2020
CVE-2020-10022
40Plan
UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
zephyrproject · zephyrMay 11, 2020
CVE-2021-3625
40Plan
Buffer overflow in Zephyr USB DFU DNLOAD
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 5, 2021
CVE-2017-14199
40Plan
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrApr 12, 2019
CVE-2023-4260
40Plan
Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrSep 27, 2023
CVE-2018-1000800
39Monitor
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrSep 6, 2018
CVE-2023-3725
39Monitor
Potential buffer overflow vulnerability in the Zephyr CANbus subsystem
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 6, 2023
CVE-2023-4257
39Monitor
Unchecked user input length in the Zephyr WiFi shell module
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 13, 2023
CVE-2022-3806
39Monitor
Bluetooth HCI Error Handling Double Free
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrJan 24, 2023
CVE-2020-13601
39Monitor
Possible read out of bounds in dns read
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrMay 25, 2021
CVE-2021-3323
39Monitor
Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 12, 2021
CVE-2021-3319
39Monitor
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrOct 5, 2021
CVE-2020-10064
39Monitor
Improper Input Frame Validation in ieee802154 Processing
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrMay 25, 2021
CVE-2023-5055
39Monitor
L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrNov 21, 2023
CVE-2026-10666
39Monitor
Stack buffer overflow in `net_ipaddr_parse()` IPv4 address-with-port parsing in `subsys/net/ip/utils.c`
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrJul 12, 2026
CVE-2026-5067
39Monitor
Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
zephyrproject · zephyrJun 9, 2026
CVE-2022-2993
39Monitor
bt: host: Wrong key validation check
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
zephyrproject · zephyrDec 9, 2022
CVE-2023-6749
39Monitor
Unchecked user input length in the Zephyr Settings Shell
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrFeb 18, 2024
CVE-2023-6249
39Monitor
ipm: signed to unsigned conversion problem in esp32_ipm_send
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
zephyrproject · zephyrFeb 18, 2024
CVE-2023-6881
39Monitor
fs: fuse: buffer overflow vulnerability in the Zephyr FS
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrFeb 28, 2024
CVE-2023-5779
39Monitor
can: out of bounds in remove_rx_filter function
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrFeb 18, 2024
CVE-2026-1678
39Monitor
dns: memory‑safety issue in the DNS name parser
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
zephyrproject · zephyrMar 5, 2026
CVE-2023-4264
38Monitor
Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
CriticalCVSS 9.6No exploitEPSS 1%
- Pre-auth
- Memory safety
zephyrproject · zephyrSep 27, 2023