ZE
Vendor
zephyrproject-rtos
29
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13351 | ZE Zephyr zephyrproject-rtos | 7.5 | Jun 25 | net: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets |
| CVE-2026-5068 | ZE Zephyr zephyrproject-rtos | 8.8 | Jun 9 | bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data |
| CVE-2026-5067 | ZE Zephyr zephyrproject-rtos | 9.8 | Jun 9 | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key |
| CVE-2026-5066 | ZE Zephyr zephyrproject-rtos | 8.8 | Jun 4 | net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect function |
| CVE-2026-5589 | ZE Zephyr zephyrproject-rtos | 6.3 | Jun 4 | Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem. |
| CVE-2026-5071 | ZE Zephyr zephyrproject-rtos | 7.8 | May 30 | can: Local Denial of Service via SocketCAN Send |
| CVE-2026-5072 | ZE Zephyr zephyrproject-rtos | 6.5 | May 22 | ptp: Potential Denial of Service via PTP Interval Shift |
| CVE-2026-1681 | ZE Zephyr zephyrproject-rtos | 6.1 | May 12 | net: Stack Overflow with Ping (to own IP Address) via Shell |
| CVE-2026-1677 | ZE Zephyr zephyrproject-rtos | 5.3 | May 11 | net: TLS 1.2 connections allowed on TLS 1.3 sockets |
| CVE-2026-5590 | ZE Zephyr zephyrproject-rtos | 5.3 | Apr 5 | net: ip/tcp: Null pointer dereference can be triggered by a race condition |
| CVE-2026-1679 | ZE Zephyr zephyrproject-rtos | 7.8 | Mar 27 | net: eswifi socket send payload length not bounded |
| CVE-2026-4179 | ZE Zephyr zephyrproject-rtos | 6.1 | Mar 14 | stm32: usb: Infinite while loop in Interrupt Handler |
| CVE-2026-0849 | ZE Zephyr zephyrproject-rtos | 6.8 | Mar 14 | crypto: ATAES132A response length allows stack buffer overflow |
| CVE-2026-1678 | ZE Zephyr zephyrproject-rtos | 9.8 | Mar 5 | dns: memory‑safety issue in the DNS name parser |
| CVE-2025-12899 | ZE Zephyr zephyrproject-rtos | 6.5 | Jan 30 | net: icmp: Out of bound memory read |
| CVE-2025-12035 | ZE Zephyr zephyrproject-rtos | 6.5 | Dec 15 | Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP |
| CVE-2025-9557 | ZE Zephyr zephyrproject-rtos | 7.6 | Nov 26 | Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont |
| CVE-2025-9558 | ZE Zephyr zephyrproject-rtos | 7.6 | Nov 26 | Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start |
| CVE-2025-9408 | ZE Zephyr zephyrproject-rtos | 8.1 | Nov 11 | Userspace privilege escalation vulnerability on Cortex M |
| CVE-2025-12890 | ZE Zephyr zephyrproject-rtos | 6.5 | Nov 7 | Bluetooth: peripheral: Invalid handling of malformed connection request |
| CVE-2025-10456 | ZE Zephyr zephyrproject-rtos | 6.5 | Sep 19 | Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests |
| CVE-2025-10458 | ZE Zephyr zephyrproject-rtos | 7.6 | Sep 19 | Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values |
| CVE-2025-7403 | ZE Zephyr zephyrproject-rtos | 6.5 | Sep 19 | Bluetooth: bt_conn_tx_processor unsafe handling |
| CVE-2025-10457 | ZE Zephyr zephyrproject-rtos | 8.1 | Sep 19 | Bluetooth: Out-Of-Context le_conn_rsp Handling |
| CVE-2025-2962 | ZE Zephyr zephyrproject-rtos | 7.5 | Jun 24 | Infinite loop in dns_copy_qname |
| CVE-2025-1675 | ZE Zephyr zephyrproject-rtos | 9.1 | Feb 25 | Out of bounds read in dns_copy_qname |
| CVE-2025-1674 | ZE Zephyr zephyrproject-rtos | 8.2 | Feb 25 | Out of bounds read when unpacking DNS answers |
| CVE-2025-1673 | ZE Zephyr zephyrproject-rtos | 8.2 | Feb 25 | Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg |
| CVE-2022-2741 | ZE zephyr zephyrproject-rtos | 7.5 | Oct 31 | can: denial-of-service can be triggered by a crafted CAN frame |