Vulnerabilities

TI-2026-13785 CVE-2026-16515

ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses…

LOW 21

net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error).

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00246 Published 2026-09-18 Fixed in 4.3.2, 4.4.2 CWE-406

TI-2026-13782 CVE-2026-16512

Out-of-bounds read in the Zephyr gPTP receive path when handling short Ethernet frames

LOW 15

gptp_handle_msg() in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTP_HDR() and switched on hdr->message_type without first checking that the received frame carries at least sizeof(struct…

CVSS 3.1LOW 3.1 Adjacent network No auth No interaction EPSS 0.00212 Published 2026-09-18 Fixed in 4.3.2, 4.4.2 CWE-125

Vulnerabilities

Filters

ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses…

Out-of-bounds read in the Zephyr gPTP receive path when handling short Ethernet frames