Vulnerabilities > Zephyrproject > Zephyr

DATE CVE VULNERABILITY TITLE RISK
2024-12-16 CVE-2024-8798 Out-of-bounds Write vulnerability in Zephyrproject Zephyr
No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.
low complexity
zephyrproject CWE-787
6.5
2024-11-15 CVE-2024-11263 Unspecified vulnerability in Zephyrproject Zephyr
When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.
local
low complexity
zephyrproject
8.4
2024-10-04 CVE-2024-6444 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 3.2.01
No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.
low complexity
zephyrproject CWE-787
6.5
2024-10-04 CVE-2024-6442 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 3.2.01
In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow.
low complexity
zephyrproject CWE-787
6.5
2024-10-04 CVE-2024-6443 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 3.2.01
In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty.
low complexity
zephyrproject CWE-787
6.5
2024-09-13 CVE-2024-6259 Out-of-bounds Write vulnerability in Zephyrproject Zephyr
BT: HCI: adv_ext_report Improper discarding in adv_ext_report
low complexity
zephyrproject CWE-787
6.5
2024-09-13 CVE-2024-5931 Out-of-bounds Write vulnerability in Zephyrproject Zephyr
BT: Unchecked user input in bap_broadcast_assistant
low complexity
zephyrproject CWE-787
6.5
2024-09-13 CVE-2024-6135 Divide By Zero vulnerability in Zephyrproject Zephyr
BT:Classic: Multiple missing buf length checks
low complexity
zephyrproject CWE-369
6.5
2024-09-13 CVE-2024-6137 Out-of-bounds Write vulnerability in Zephyrproject Zephyr
BT: Classic: SDP OOB access in get_att_search_list
low complexity
zephyrproject CWE-787
6.5
2024-09-13 CVE-2024-5754 Unspecified vulnerability in Zephyrproject Zephyr
BT: Encryption procedure host vulnerability
low complexity
zephyrproject
6.5