Zephyrproject-Rtos Zephyr vulnerabilities

CVE-2020-13599 [LOW] CWE-276 CVE-2020-13599: Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect D Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q

CVE-2021-3435 [LOW] CWE-908 CVE-2021-3435: Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh

CVE-2021-3433 [LOW] CWE-703 CVE-2021-3433: Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptional Conditions (CWE-703). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp

CVE-2024-5754 [HIGH] CWE-807 BT: Encryption procedure host vulnerability BT: Encryption procedure host vulnerability BT: Encryption procedure host vulnerability

CVE-2023-6249 [HIGH] CWE-704 ipm: signed to unsigned conversion problem in esp32_ipm_send ipm: signed to unsigned conversion problem in esp32_ipm_send Signed to unsigned conversion esp32_ipm_send

CVE-2024-6135 [HIGH] CWE-122 BT:Classic: Multiple missing buf length checks BT:Classic: Multiple missing buf length checks BT:Classic: Multiple missing buf length checks

CVE-2023-6881 [HIGH] CWE-120 fs: fuse: buffer overflow vulnerability in the Zephyr FS fs: fuse: buffer overflow vulnerability in the Zephyr FS Possible buffer overflow in is_mount_point

CVE-2023-5779 [MEDIUM] CWE-787 can: out of bounds in remove_rx_filter function can: out of bounds in remove_rx_filter function can: out of bounds in remove_rx_filter function