zephyrproject vulnerabilities
Every vulnerability this feed holds for zephyrproject, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
7 vulnerabilities tracked.
- 8.8 The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI…
- 8.2 The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate.
- 7.8 The arm64 MMU backend invalidates a single virtual address from the TLB with invalidatetlbpage() in arch/arm64/core/mmu.c, which issued…
- 7.5 Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread (previously…
- 6.5 The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised…
- 5.6 The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter rather…
- 3.6 The RTIO streaming completion callback adxl345processfifosamplescb() in drivers/sensor/adi/adxl345/adxl345stream.c clamps the amount of…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that zephyrproject is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat n/a MediaTek, Inc. Linux Apache Software Foundation Gitea WAVLINK Huawei Eclipse Foundation Apple WSO2 Dell PostgreSQL Control Web Panel Hewlett Packard Enterprise (HPE) nodejs Netpbm aws MONGODB Cisco Unknown Petpooja Oray