Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zephyrproject'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-10457 4.3 The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching. 2025-10-29 18:52:28
CVE-2025-10456 7.1 A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fix 2025-10-29 18:16:37
CVE-2025-10458 7.6 Parameters are not validated or sanitized, and are later used in various internal operations. 2025-10-29 18:08:06
CVE-2025-7403 7.6 Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes are attacker-controlled, enabling precise memory corruption. 2025-10-29 18:05:53
CVE-2024-10395 8.6 No proper validation of the length of user input in http_server_get_content_type_from_extension. 2025-10-29 15:19:30
CVE-2024-5754 8.2 BT: Encryption procedure host vulnerability 2025-09-17 07:15:41
CVE-2024-8798 7.5 No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. 2025-09-17 06:15:41
CVE-2024-6259 7.6 BT: HCI: adv_ext_report Improper discarding in adv_ext_report 2025-09-17 06:15:41
CVE-2024-6258 6.8 BT: Missing length checks of net_buf in rfcomm_handle_data 2025-09-17 06:15:40
CVE-2024-6137 7.6 BT: Classic: SDP OOB access in get_att_search_list 2025-09-17 06:15:39
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/18
Zapisa po stranici: