Vulnerabilities in zephyrproject-rtos
130 resultsCVE-2025-9558HIGHBluetooth: Mesh: Out-of-Bound Write in gen_prov_startEPSS 0.2%CVE-2026-10658HIGHBluetooth Host ISO RX Missing SDU Header Length Validation in bt_iso_recv() Leads to DoSEPSS 0.2%CVE-2026-10651HIGHBluetooth Classic SDP parser truncation bug in bt_sdp_parse_attribute() leads to reachable assertion and possible out-of-bounds readEPSS 0.2%CVE-2026-5068HIGHbt: l2cap le coc: remote oob write via seg counter stored in net_buf user_dataEPSS 0.2%CVE-2025-12890MEDIUMBluetooth: peripheral: Invalid handling of malformed connection requestEPSS 0.2%CVE-2024-11263CRITICALarch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=yEPSS 0.2%CVE-2026-5590MEDIUMnet: ip/tcp: Null pointer dereference can be triggered by a race conditionEPSS 0.2%CVE-2026-5071MEDIUMcan: Local Denial of Service via SocketCAN SendEPSS 0.1%CVE-2026-1681MEDIUMnet: Stack Overflow with Ping (to own IP Address) via ShellEPSS 0.1%CVE-2025-9408HIGHUserspace privilege escalation vulnerability on Cortex MEPSS 0.1%