Vulnerabilities > CVE-2021-3322 - NULL Pointer Dereference vulnerability in Zephyrproject Zephyr 2.4.0

047910
CVSS 6.5 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
low complexity
zephyrproject
CWE-476
NVD
Published: 2021-10-12
Updated: 2023-02-06

Summary

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3

Vulnerable Configurations

Part Description Count
OS
Zephyrproject
4

Common Weakness Enumeration (CWE)

References