Vulnerabilities

TI-2021-02332 CVE-2021-3330

Out-of-bounds write in zephyrproject zephyr

LOW 39

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00608 Published 2021-10-12 No fix listed CWE-787

TI-2021-02326 CVE-2021-3323

MEDIUM 44

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2021-10-12 No fix listed CWE-191

TI-2021-02325 CVE-2021-3322

LOW 30

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00544 Published 2021-10-12 No fix listed CWE-476

TI-2021-02324 CVE-2021-3321

LOW 39

Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00761 Published 2021-10-12 No fix listed CWE-680