Zephyrproject Archives - CVE Vulnerability

CVE-2020-10065

Sun, 26 Feb 2023 06:35:41 +0000

Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c

The post CVE-2020-10065 appeared first on CVE Vulnerability.

CVE-2021-3966

Thu, 23 Feb 2023 14:11:33 +0000

usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.

The post CVE-2021-3966 appeared first on CVE Vulnerability.

CVE-2021-3581

Thu, 23 Feb 2023 14:10:34 +0000

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5

The post CVE-2021-3581 appeared first on CVE Vulnerability.

CVE-2021-3454

Thu, 23 Feb 2023 14:10:16 +0000

Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3

The post CVE-2021-3454 appeared first on CVE Vulnerability.

CVE-2021-3435

Thu, 23 Feb 2023 14:10:11 +0000

Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh

The post CVE-2021-3435 appeared first on CVE Vulnerability.

CVE-2021-3434

Thu, 23 Feb 2023 14:10:11 +0000

Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm

The post CVE-2021-3434 appeared first on CVE Vulnerability.

CVE-2021-3433

Thu, 23 Feb 2023 14:10:11 +0000

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptional Conditions (CWE-703). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp

The post CVE-2021-3433 appeared first on CVE Vulnerability.

CVE-2021-3432

Thu, 23 Feb 2023 14:10:11 +0000

Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4

The post CVE-2021-3432 appeared first on CVE Vulnerability.

CVE-2021-3322

Thu, 23 Feb 2023 14:09:58 +0000

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3

The post CVE-2021-3322 appeared first on CVE Vulnerability.

CVE-2021-3319

Thu, 23 Feb 2023 14:09:57 +0000

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364

The post CVE-2021-3319 appeared first on CVE Vulnerability.