Zephyr
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 34 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 18, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Stack out-of-bounds write in the OSDP Control Panel reply parser
Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header
Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command fails
Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement
Out-of-bounds write in the IEEE 802.15.4 L2 transmit path for oversized non-6LoWPAN frames
Use-after-free / double-free from unsynchronized concurrent access to the TLS client session cache in Zephyr sockets
NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway
Monitor Zephyr in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.