Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: zephyrproject zephyr 4.3.2, 4.4.2 Clear all filters
TI-2026-11219 CVE-2026-13213

Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_register

Priority LOW 24

The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT_CONN_CB_DEFINE, so security_changed() runs for every connection that establishes secu…

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00246 Published 2026-08-24 Fixed in 4.3.2, 4.4.2 CWE-476
TI-2026-08525 CVE-2026-9728

TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

Priority LOW 27

The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out of live userspace memory, and then forwarded the original, st…

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.0011 Published 2026-08-24 Fixed in 4.3.2, 4.4.2 CWE-367