Zephyr
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 106 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 18, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Out-of-bounds read in Zephyr HTTP client debug logging of response header fields
NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame
NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame
sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready
Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory
Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory
Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory
Use-after-free via dynamically allocated message queue retained by the CAN RX filter
Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribers
Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference
Monitor Zephyr in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.