zephyrproject
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 198 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 6, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Integer underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds read
NULL pointer dereference in Zephyr LwM2M client when the CoAP Block1 context pool is exhausted
Wild pointer dereference in Zephyr BSD sockets when a TCP listening socket reports an asynchronous error
Out-of-bounds read in CoAP well-known-core Uri-Query href matching (match_path_uri)
Out-of-bounds write in the IEEE 802.15.4 L2 transmit path for oversized non-6LoWPAN frames
Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation
Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation
Missing write validation of user-supplied handle pointer in the RTIO syscall verifier allows arbitrary kernel write
Out-of-bounds read in PTP management TLV TIME parsing in Zephyr net PTP
Out-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handler
Monitor zephyrproject in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.