p PatchFirst

PatchFirst · Latest vulnerabilities

zephyr vulnerabilities · Page 2

Vulnerabilities published for zephyr in the last 30 days: 13. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 22

  1. CVE-2021-3861

    High · CVSS 8.2EPSS 0.48%No fix published

    The RNDIS USB device class includes a buffer overflow vulnerability

    The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj

    zephyrOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2021-3835

    High · CVSS 8.2EPSS 0.74%No fix published

    Buffer overflow in usb device class

    Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf

    zephyrOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →