Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: zephyrproject zephyr 4.3.2, 4.4.2 Clear all filters
TI-2026-12149 CVE-2026-14368

Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parser

Priority MEDIUM 58

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into a caller-supplied buffer and NUL-terminates it.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00274 Published 2026-08-31 Fixed in 4.3.2, 4.4.2 CWE-193
TI-2026-12148 CVE-2026-14367

I3C IBI work-node free-list data race between ISR and workqueue thread

Priority LOW 14

The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-list i3c_ibi_work_nodes_free implemented as a plain sys_slist_t, which provides no synchronization.

CVSS 3.1LOW 3.1 Physical No auth No interaction EPSS 0.00136 Published 2026-08-31 Fixed in 4.3.2, 4.4.2 CWE-362