Zephyrproject Zephyr 3.7.0
Approved changes feed: RSS · Atom
cpe:2.3:o:zephyrproject:zephyr:3.7.0:-:*:*:*:*:*:*part: o version: 3.7.0 update: -
| Vendor | Zephyrproject (eef6daf7-3b78-5888-804c-646f0e695bd1) |
|---|---|
| Product | Zephyr (f20ab476-7412-54eb-9a65-7712653f3d16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nrfconnect/sdk-zephyr |
purl2cpe | 2026-11-03 09:58:47.018763 |
pkg:github/zephyrproject-rtos/zephyr |
purl2cpe | 2026-06-01 10:17:09.781022 |
pkg:sourceforge/zephyr-project.mirror |
purl2cpe | 2026-11-03 09:58:47.018764 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-20435 |
vulnerable | 2026-06-08 07:49:12.034271 |
Details available
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
Published: 2026-03-02T08:39:12.070Z
Updated: 2026-03-30T13:05:38.348Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20747 |
vulnerable | 2026-06-08 07:08:49.340161 |
Details available
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
Published: 2025-11-04T06:20:19.607Z
Updated: 2026-02-26T17:47:20.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20746 |
vulnerable | 2026-06-08 07:08:49.335004 |
Details available
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.
Published: 2025-11-04T06:20:17.860Z
Updated: 2026-02-26T17:47:21.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20696 |
vulnerable | 2026-06-08 07:08:49.120905 |
Details available
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215; Issue ID: MSV-3801.
Published: 2025-08-04T01:49:46.880Z
Updated: 2025-08-04T13:47:57.557Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.