Vulnerabilities

TI-2021-02571 CVE-2021-3625

Heap-based buffer overflow in zephyrproject zephyr

MEDIUM 46

Buffer overflow in Zephyr USB DFU DNLOAD.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02312 Published 2021-10-05 No fix listed CWE-122

TI-2021-02530 CVE-2021-3581

LOW 38

Buffer Access with Incorrect Length Value in zephyr.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00349 Published 2021-10-05 No fix listed CWE-805

TI-2021-02469 CVE-2021-3510

LOW 35

Zephyr JSON decoder incorrectly decodes array of array.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00961 Published 2021-10-05 No fix listed CWE-588

TI-2021-02400 CVE-2021-3436

LOW 31

BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0098 Published 2021-10-05 No fix listed CWE-694

TI-2021-02322 CVE-2021-3319

MEDIUM 44

DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0088 Published 2021-10-05 No fix listed CWE-476