Rezultati pretraživanja za 'Proizvođač: zephyrproject'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-13479 | 3.1 | The LoRaWAN application-layer clock-synchronization service parses downlinks in clock_sync_package_callback() (subsys/lorawan/services/clock_sync.c). Its command loop only guarantees that the one-byte command id is in bounds; for the CLOCK_SYNC_CMD_A | 2026-08-31 23:30:49 | 2026-08-26 15:16:42 |
| CVE-2026-13480 | 3.1 | The LoRaWAN TS004 Fragmented Data Block Transport handler frag_transport_package_callback() in subsys/lorawan/services/frag_transport.c parses downlink command bytes without validating that enough payload bytes remain before each access. The loop's o | 2026-08-31 22:56:36 | 2026-08-26 15:16:42 |
| CVE-2026-13481 | 5.4 | The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME management id. In tlv_mgmt_post_recv(), the PTP_MGMT_TIME case casts mgmt_tlv->data to a 10-byte struct ptp_timestamp and reads it (then byte-swaps a | 2026-08-31 22:46:11 | 2026-08-26 15:16:42 |
| CVE-2026-10681 | 6.5 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bitmap without holding lists_lock. On SMP systems, two user-mode threads in | 2026-08-12 14:48:55 | 2026-07-25 14:16:28 |
| CVE-2026-10682 | 6.6 | The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed comparison against the int16_t src_id parameter: src_id < (int16_t)log_src_cnt_get(domain_id). Any negative value for src_id | 2026-08-12 14:27:28 | 2026-07-27 19:17:14 |
| CVE-2026-10686 | 5.8 | Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6_route_packet() (subsys/net/ip) were affected: the explicit-route path (net_route_packet()) and the on-link cross- | 2026-08-07 18:56:38 | 2026-07-31 16:16:57 |
| CVE-2026-7656 | 8.1 | The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator p | 2026-08-06 22:18:32 | 2026-06-29 23:16:43 |
| CVE-2026-10670 | 5.5 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller-supplied thread pointer and then dereferences the returned struct k_object without | 2026-08-06 22:16:43 | 2026-07-14 15:16:55 |
| CVE-2026-10653 | 6.4 | The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of each variable/heap data allocation -- with plain non-atomic C operators (buf->ref++, i | 2026-08-06 22:16:43 | 2026-06-30 17:16:20 |
| CVE-2026-10652 | 4.8 | Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlength) and accepted any attacker-declared rdlength, including one extending p | 2026-08-06 22:16:43 | 2026-06-30 17:16:20 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/18
Zapisa po stranici: