Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zephyrproject zephyr 4.3.2, 4.5.0 Clear all filters
TI-2026-84254 CVE-2026-85035

Use-after-free in Zephyr CAN RX filter message queue handling

Priority LOW 39

The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in drivers/can/can_common.c) is handed the caller's struct k_msgq * as user_data.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00228 Published 2026-11-03 Fixed in 4.3.2, 4.5.0 CWE-416
TI-2026-84253 CVE-2026-85034

Out-of-bounds write in Zephyr Bluetooth GATT client notifications

Priority LOW 29

The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indication or Multiple Handle Value Notification to bt_gatt_subscribe_params::notify callbacks using only the length…

CVSS 3.1MEDIUM 6.7 Adjacent network Low privileges No interaction EPSS 0.00239 Published 2026-11-03 Fixed in 4.3.2, 4.5.0 CWE-787