Skip to content
OpenAdvisories

Vendor

zephyrproject-rtos

136 known vulnerabilities.

Products

Zephyr 136
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-19809

    The user-mode system call verifier z_vrfy_charger_get_prop() in drivers/charger/charger_handlers.c declares an uninitia…

    zephyrproject-rtos Zephyr
  • Low 3.8
    CVE-2026-0849

    crypto: ATAES132A response length allows stack buffer overflow

    Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution.

    zephyrproject-rtos Zephyr
  • Low 3.3
    CVE-2020-13599

    Security problem with settings and littlefs

    Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q

    zephyrproject-rtos Zephyr
  • Low 2.5
    CVE-2020-10066

    Incorrect Error Handling in Bluetooth HCI core

    Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr

    zephyrproject-rtos Zephyr
  • Low 3.8
    CVE-2020-10065

    Missing Size Checks in Bluetooth HCI over SPI

    Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62…

    zephyrproject-rtos Zephyr