Rezultati pretraživanja za 'Proizvođač: zephyrproject'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-10641 | 7.1 | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write. During Service Level Connection setup the HF sends AT+CIND=? and parses the AG's +CIND: response in c | 2026-06-26 14:58:10 | 2026-06-17 14:17:37 |
| CVE-2026-10635 | 6.3 | On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active memory domains using a list node embedded inside the caller-owned struct k_mem_doma | 2026-06-16 20:52:48 | 2026-06-16 06:16:57 |
| CVE-2026-4179 | 6.1 | Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop. | 2026-04-02 20:45:41 | 2026-03-16 14:19:58 |
| CVE-2026-0849 | 3.8 | Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution. | 2026-04-02 14:26:59 | 2026-03-16 14:18:07 |
| CVE-2026-1679 | 7.3 | The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send | 2026-03-31 20:35:00 | 2026-03-28 00:16:04 |
| CVE-2026-1678 | 9.4 | dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a ma | 2026-03-09 18:33:42 | 2026-03-05 07:16:11 |
| CVE-2026-20435 | 4.6 | In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interact | 2026-03-03 12:52:46 | 2026-03-02 09:16:16 |
| CVE-2025-20746 | 6.7 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitatio | 2025-11-05 17:11:34 | 2025-11-04 07:15:48 |
| CVE-2025-20747 | 6.7 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitatio | 2025-11-05 17:11:25 | 2025-11-04 07:15:49 |
| CVE-2025-2962 | 7.5 | A denial-of-service issue in the dns implemenation could cause an infinite loop. | 2025-10-30 15:50:09 | 2025-06-24 06:15:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/18
Zapisa po stranici: