Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: zephyrproject zephyr 4.5.0 Clear all filters
TI-2026-70796 CVE-2026-19935

Use-after-free in Zephyr Bluetooth L2CAP CoC channel teardown

Priority LOW 34

The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded in the channel object (le_chan->rx_work, handler l2cap_rx_process()) whenever th…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00179 Published 2026-10-11 Fixed in 4.5.0 CWE-416
TI-2026-70791 CVE-2026-19736

Out-of-bounds write in Zephyr NXP MCUX TRNG entropy driver

Priority LOW 35

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-10-11 Fixed in 4.5.0 CWE-787
TI-2026-70788 CVE-2026-19577

Out-of-bounds read in Zephyr IPv6 route forwarding

Priority LOW 31

net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first checking whether the neighbor cache entry actually had a linked link-layer a…

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00217 Published 2026-10-11 Fixed in 4.5.0 CWE-125
TI-2026-70787 CVE-2026-19576

Stack out-of-bounds write in Zephyr Goodix GT911 touch driver

Priority LOW 31

The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK (0x0F), yielding a value of 0..15.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00169 Published 2026-10-11 Fixed in 4.5.0 CWE-787