Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 30

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rx_ctxt->nb->len -= 2U; in mcumgr_serial_process_fr…

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00242 Published 2026-09-28 Fixed in 4.3.2, 4.4.2 CWE-125
Priority LOW 35

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in include/zephyr/drivers/adc.h documents that "the driver must ensure th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2026-09-28 Fixed in 4.3.2, 4.4.2 CWE-787
Priority LOW 35

The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0) validated the RTIO object handle and the sqes input array, but not the handle out-pa…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-09-28 Fixed in 4.3.2, 4.4.2 CWE-787