Vulnerabilities > Zephyrproject > Zephyr > High

DATE CVE VULNERABILITY TITLE RISK
2022-06-28 CVE-2021-3432 Divide By Zero vulnerability in Zephyrproject Zephyr
Invalid interval in CONNECT_IND leads to Division by Zero.
network
low complexity
zephyrproject CWE-369
7.5
7.5
2022-06-28 CVE-2021-3434 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 2.5.0/2.5.1
Stack based buffer overflow in le_ecred_conn_req().
local
low complexity
zephyrproject CWE-787
7.8
7.8
2022-02-07 CVE-2021-3835 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 2.6.0/2.6.1/3.0.0
Buffer overflow in usb device class.
low complexity
zephyrproject CWE-787
8.8
8.8
2021-10-19 CVE-2021-3454 Reachable Assertion vulnerability in Zephyrproject Zephyr 2.4.0/2.5.0/2.5.1
Truncated L2CAP K-frame causes assertion failure.
network
low complexity
zephyrproject CWE-617
7.5
7.5
2021-10-19 CVE-2021-3455 Use After Free vulnerability in Zephyrproject Zephyr 2.4.0/2.5.0/2.5.1
Disconnecting L2CAP channel right after invalid ATT request leads freeze.
network
low complexity
zephyrproject CWE-416
7.5
7.5
2021-10-12 CVE-2021-3321 Integer Underflow (Wrap or Wraparound) vulnerability in Zephyrproject Zephyr 2.4.0
Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal.
low complexity
zephyrproject CWE-191
8.8
8.8
2021-10-12 CVE-2021-3330 Out-of-bounds Write vulnerability in Zephyrproject Zephyr 2.4.0
RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr.
low complexity
zephyrproject CWE-787
8.8
8.8
2021-10-05 CVE-2021-3510 Unspecified vulnerability in Zephyrproject Zephyr
Zephyr JSON decoder incorrectly decodes array of array.
network
low complexity
zephyrproject
7.5
7.5
2021-10-05 CVE-2021-3581 Improper Validation of Specified Quantity in Input vulnerability in Zephyrproject Zephyr 2.5.0/2.5.1
Buffer Access with Incorrect Length Value in zephyr.
low complexity
zephyrproject CWE-1284
8.8
8.8
2021-05-25 CVE-2020-10065 Out-of-bounds Write vulnerability in Zephyrproject Zephyr
Missing Size Checks in Bluetooth HCI over SPI.
low complexity
zephyrproject CWE-787
8.8
8.8