Zephyrproject Zephyr 1.14.2
Approved changes feed: RSS · Atom
cpe:2.3:o:zephyrproject:zephyr:1.14.2:*:*:*:*:*:*:*part: o version: 1.14.2 update: *
| Vendor | Zephyrproject (eef6daf7-3b78-5888-804c-646f0e695bd1) |
|---|---|
| Product | Zephyr (f20ab476-7412-54eb-9a65-7712653f3d16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nrfconnect/sdk-zephyr |
purl2cpe | 2026-11-03 09:58:47.018413 |
pkg:github/zephyrproject-rtos/zephyr |
purl2cpe | 2026-06-01 10:17:09.763876 |
pkg:sourceforge/zephyr-project.mirror |
purl2cpe | 2026-11-03 09:58:47.018415 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3510 |
vulnerable | 2026-06-08 05:33:52.529034 |
Zephyr JSON decoder incorrectly decodes array of array
HIGH (7.5)
Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4
Published: 2021-10-05T20:50:17.320Z
Updated: 2024-09-16T19:04:43.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3436 |
vulnerable | 2026-06-08 05:33:51.331067 |
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
MEDIUM (4.3)
BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known. Zephyr versions >= 1.14.2, >= 2.4.0, >= 2.5.0 contain Use of Multiple Resources with Duplicate Identifier (CWE-694). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j76f-35mc-4h63
Published: 2021-10-05T20:50:15.802Z
Updated: 2024-09-16T20:31:46.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10024 |
vulnerable | 2026-06-08 05:16:34.055148 |
ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers
HIGH (7.8)
The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
Published: 2020-05-11T22:26:13.572Z
Updated: 2024-09-17T01:56:05.691Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.