Zephyr Project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 72 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 15, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driver
Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet length
Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver
Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeeping
Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption
Bluetooth Mesh Access layer permanently leaks delayable-message contexts, disabling all model responses
Bluetooth Mesh delayable message queue: unsynchronized list access leads to NULL pointer dereference
Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure
Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update
Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedures
Monitor Zephyr Project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.