Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: zephyrproject zephyr 4.3.2, 4.5.0 Clear all filters
TI-2026-79954 CVE-2026-79982

Out-of-bounds write in Zephyr USB Bluetooth HCI transport class

Priority LOW 39

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00229 Published 2026-10-23 Fixed in 4.3.2, 4.5.0 CWE-787
TI-2026-79950 CVE-2026-79978

Out-of-bounds write in ADXL345 sensor driver RTIO FIFO read path

Priority LOW 16

The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of FIFO data it will report (read_len = MIN(fifo_bytes, buf_avail)) to the space a…

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00091 Published 2026-10-23 Fixed in 4.3.2, 4.5.0 CWE-787
TI-2026-79948 CVE-2026-19741

Default Thread joiner credential in Zephyr OpenThread enables device takeover

Priority LOW 34

Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfig.thread (previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread)…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00263 Published 2026-10-23 Fixed in 4.3.2, 4.5.0 CWE-1392