Vulnerabilities

The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution.

In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution.

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service.

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service.

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution.

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption.