High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-11	CVE-2020-10024	Incorrect Comparison vulnerability in Zephyrproject Zephyr 1.14.2/2.1.0 The arm platform-specific code uses a signed integer comparison when validating system call numbers. local low complexity zephyrproject CWE-697	7.8
2020-05-11	CVE-2020-10021	Out-of-bounds Write vulnerability in Zephyrproject Zephyr Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024, NCC-ZEP-025, NCC-ZEP-026 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. local low complexity zephyrproject CWE-787	7.8
2020-05-11	CVE-2020-10019	Classic Buffer Overflow vulnerability in Zephyrproject Zephyr USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. local low complexity zephyrproject CWE-120	7.8
2019-08-29	CVE-2017-14202	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Zephyrproject Zephyr Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. local low complexity zephyrproject CWE-119	7.8
2019-08-29	CVE-2017-14201	Use After Free vulnerability in Zephyrproject Zephyr Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. local low complexity zephyrproject CWE-416	7.8