Product by Zephyrproject-rtos
Zephyr
127 known vulnerabilities in Zephyr (Zephyrproject-rtos), 0 of them actively exploited (CISA KEV).
Key figures
127
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
28
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-10071 | Insufficient publish message length validation in MQTT | 9.0 | |
| Critical | CVE-2020-10070 | MQTT buffer overflow on receive buffer | 9.0 | |
| Critical | CVE-2020-10062 | Packet length decoding error in MQTT | 9.0 | |
| Critical | CVE-2021-3625 | Buffer overflow in Zephyr USB DFU DNLOAD | 9.6 | |
| Critical | CVE-2020-10022 | UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array | 9.0 | |
| Critical | CVE-2026-5067 | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key | 9.8 | |
| High | CVE-2020-10060 | UpdateHub Might Dereference An Uninitialized Pointer | 8.0 | |
| High | CVE-2020-10063 | Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow | 6.8 | |
| Critical | CVE-2022-3806 | Bluetooth HCI Error Handling Double Free | 9.8 | |
| Critical | CVE-2023-3725 | Potential buffer overflow vulnerability in the Zephyr CANbus subsystem | 7.6 | |
| Critical | CVE-2023-4257 | Unchecked user input length in the Zephyr WiFi shell module | 7.6 | |
| Critical | CVE-2020-13601 | Possible read out of bounds in dns read | 9.0 | |
| Critical | CVE-2023-4264 | Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem | 7.1 | |
| Critical | CVE-2026-1678 | dns: memory‑safety issue in the DNS name parser | 9.4 | |
| High | CVE-2026-13351 | net: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets | 7.5 | |
| Critical | CVE-2021-3323 | Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr | 8.3 | |
| Critical | CVE-2021-3329 | Zephyr: Improper Check or Handling of Exceptional Conditions | 9.6 | |
| Critical | CVE-2023-5055 | L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req() | 8.3 | |
| High | CVE-2022-1041 | Zephyr: Out-of-bounds Write | 8.2 | |
| High | CVE-2026-5068 | bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data | 7.6 | |
| High | CVE-2025-2962 | Infinite loop in dns_copy_qname | 8.2 | |
| High | CVE-2021-3510 | Zephyr JSON decoder incorrectly decodes array of array | 7.5 | |
| High | CVE-2022-1042 | Zephyr: Out-of-bounds Write | 8.2 | |
| High | CVE-2023-5753 | Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem | 6.3 | |
| Critical | CVE-2020-10064 | Improper Input Frame Validation in ieee802154 Processing | 8.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,