Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zephyrproject zephyr 4.3.2, 4.5.0 Clear all filters
TI-2026-67561 CVE-2026-19185

Zephyr I3C CCC calls let user threads access kernel memory

Priority LOW 33

The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targets.payloads[] array, but did not validate the per-target data…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2026-10-05 Fixed in 4.3.2, 4.5.0 CWE-822
TI-2026-67560 CVE-2026-19184

Out-of-bounds write in Zephyr NXP GAU ADC driver

Priority LOW 35

The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is expressed in bytes, against the number of active channels, which is a sample count.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00103 Published 2026-10-05 Fixed in 4.3.2, 4.5.0 CWE-787