Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zephyrproject'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-5931 6.3 BT: Unchecked user input in bap_broadcast_assistant 2025-09-17 05:15:31
CVE-2024-4785 7.6 BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero 2025-09-17 05:15:31
CVE-2025-20696 6.8 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is need 2025-08-18 15:42:28
CVE-2022-1822 4.3 The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘project’ parameter in versions up to, and including, 3.2.40 due to insufficient input sanitization and output escaping. This makes it possible fo 2025-05-05 17:17:36
CVE-2022-2993 8.6 There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current keys if all requirements were unmet. 2025-04-22 18:15:49
CVE-2023-0396 6.8 A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses. 2025-04-03 20:15:20
CVE-2022-3806 9.8 Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer. 2025-04-03 20:15:17
CVE-2023-7060 8.6 Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address. 2025-03-27 15:15:48
CVE-2025-1674 8.2 A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. 2025-02-28 01:30:32
CVE-2025-1673 8.2 A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation. 2025-02-28 01:30:32
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/18
Zapisa po stranici: