Product by Zephyrproject
Zephyrproject Zephyr
322 known vulnerabilities in Zephyrproject Zephyr (Zephyrproject), 0 of them actively exploited (CISA KEV).
Key figures
322
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
33
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-10071 | Insufficient publish message length validation in MQTT | 9.0 | |
| Critical | CVE-2020-10070 | MQTT buffer overflow on receive buffer | 9.0 | |
| Critical | CVE-2020-10062 | Packet length decoding error in MQTT | 9.0 | |
| Critical | CVE-2021-3625 | Buffer overflow in Zephyr USB DFU DNLOAD | 9.6 | |
| Critical | CVE-2026-13214 | Stack buffer overflow in OCPP GetConfiguration key parsing | 9.8 | |
| Critical | CVE-2020-10022 | UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array | 9.0 | |
| Critical | CVE-2017-14199 | Zephyr Getaddrinfo: Buffer Overflow | 9.8 | |
| Critical | CVE-2018-1000800 | Zephyrproject Zephyr: security vulnerability | 9.8 | |
| Critical | CVE-2026-10666 | Zephyrproject Zephyr: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2026-5067 | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key | 9.8 | |
| High | CVE-2020-10060 | UpdateHub Might Dereference An Uninitialized Pointer | 8.0 | |
| High | CVE-2026-8023 | Zephyrproject Zephyr: Path Traversal | 7.5 | |
| Critical | CVE-2026-10672 | Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI) | 9.1 | |
| High | CVE-2020-10063 | Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow | 6.8 | |
| Critical | CVE-2022-3806 | Bluetooth HCI Error Handling Double Free | 9.8 | |
| High | CVE-2026-15891 | NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway | 7.5 | |
| Critical | CVE-2023-3725 | Potential buffer overflow vulnerability in the Zephyr CANbus subsystem | 7.6 | |
| High | CVE-2026-15894 | Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement | 8.8 | |
| High | CVE-2026-19570 | Zephyrproject Zephyr: Classic Buffer Overflow | 8.8 | |
| High | CVE-2026-10665 | Heap buffer overflow on WireGuard receive path via unbounded incoming packet length | 7.4 | |
| High | CVE-2026-76788 | Stack out-of-bounds write in the OSDP Control Panel reply parser | 8.8 | |
| High | CVE-2026-13212 | Zephyrproject Zephyr: Improper Validation of Array Index | 8.8 | |
| High | CVE-2026-79982 | Zephyrproject Zephyr: Out-of-bounds Write | 8.8 | |
| Medium | CVE-2026-13217 | NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi | 5.9 | |
| High | CVE-2026-10673 | Out-of-bounds write in ADIN2111/ADIN1110 OA SPI Ethernet RX frame reassembly | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,