Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: zephyrproject zephyr 4.5.0 Clear all filters
TI-2026-84939 CVE-2026-87043

Zephyr sys_rand_get() returns stale data when entropy is not ready

Priority LOW 21

The entropy-device random number generator in subsys/random/random_entropy_device.c returned early with -ENODEV from rand_get() as soon as device_is_ready() failed, before reaching the non-cryptographic system-timer fall…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00183 Published 2026-11-04 Fixed in 4.5.0 CWE-330
TI-2026-84936 CVE-2026-87039

Unvalidated pointer in Zephyr I2S configure syscall reaches kernel slabs

Priority LOW 33

The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the caller's struct i2s_config in from user memory and then, when cfg->frame_clk_freq is 0 (the API's "unconfigure the stream" re…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00101 Published 2026-11-04 Fixed in 4.5.0 CWE-787