| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2021-3330 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr | zephyrproject-rtos | zephyr | High | 7.1 | 2021-10-12 21:50:18 | Deep Dive |
| CVE-2021-3323 | Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr | zephyrproject-rtos | zephyr | High | 8.3 | 2021-10-12 21:50:16 | Deep Dive |
| CVE-2021-3322 | Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr | zephyrproject-rtos | zephyr | Medium | 6.5 | 2021-10-12 21:50:15 | Deep Dive |
| CVE-2021-3321 | Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal | zephyrproject-rtos | zephyr | High | 7.5 | 2021-10-12 21:50:13 | Deep Dive |
| CVE-2021-3625 | Buffer overflow in Zephyr USB DFU DNLOAD | zephyrproject-rtos | zephyr | Critical | 9.6 | 2021-10-05 20:50:20 | Deep Dive |
| CVE-2021-3581 | Buffer Access with Incorrect Length Value in zephyr | zephyrproject-rtos | zephyr | High | 7.0 | 2021-10-05 20:50:19 | Deep Dive |
| CVE-2021-3510 | Zephyr JSON decoder incorrectly decodes array of array | zephyrproject-rtos | zephyr | High | 7.5 | 2021-10-05 20:50:17 | Deep Dive |
| CVE-2021-3436 | BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known | zephyrproject-rtos | zephyr | Medium | 4.3 | 2021-10-05 20:50:16 | Deep Dive |
| CVE-2021-3319 | DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses | zephyrproject-rtos | zephyr | Medium | 6.5 | 2021-10-05 20:50:14 | Deep Dive |
| CVE-2021-3320 | Type Confusion in 802154 ACK Frames Handling | zephyrproject-rtos | zephyr | Medium | 5.9 | 2021-05-24 21:40:31 | Deep Dive |
| CVE-2020-13603 | Integer Overflow in memory allocating functions | zephyrproject-rtos | zephyr | Medium | 6.9 | 2021-05-24 21:40:30 | Deep Dive |
| CVE-2020-13601 | Possible read out of bounds in dns read | zephyrproject-rtos | zephyr | Critical | 9.0 | 2021-05-24 21:40:29 | Deep Dive |
| CVE-2020-13602 | Remote Denial of Service in LwM2M do_write_op_tlv | zephyrproject-rtos | zephyr | Medium | 4.0 | 2021-05-24 21:40:29 | Deep Dive |
| CVE-2020-13600 | Malformed SPI in response for eswifi can corrupt kernel memory | zephyrproject-rtos | zephyr | High | 7.0 | 2021-05-24 21:40:28 | Deep Dive |
| CVE-2020-13598 | FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat | zephyrproject-rtos | zephyr | Medium | 6.3 | 2021-05-24 21:40:27 | Deep Dive |
| CVE-2020-13599 | Security problem with settings and littlefs | zephyrproject-rtos | zephyr | Low | 3.3 | 2021-05-24 21:40:27 | Deep Dive |
| CVE-2020-10072 | Improper Handling of Insufficient Permissions or Privileges in zephyr | zephyrproject-rtos | zephyr | Medium | 5.9 | 2021-05-24 21:40:26 | Deep Dive |
| CVE-2020-10066 | Incorrect Error Handling in Bluetooth HCI core | zephyrproject-rtos | zephyr | Low | 2.5 | 2021-05-24 21:40:25 | Deep Dive |
| CVE-2020-10069 | Zephyr Bluetooth unchecked packet data results in denial of service | zephyrproject-rtos | zephyr | Medium | 4.3 | 2021-05-24 21:40:25 | Deep Dive |
| CVE-2020-10065 | Missing Size Checks in Bluetooth HCI over SPI | zephyrproject-rtos | zephyr | Low | 3.8 | 2021-05-24 21:40:24 | Deep Dive |