Zephyr vulnerabilities
CVEs whose affected-version data names the Zephyr package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
216 CVEsRSS
CVE-2025-10457Medium· 4.3The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.
CVE-2025-10456High· 7.1A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT)
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to dis…
CVE-2025-2962High· 7.5A denial-of-service issue in the dns implemenation could cause an infinite loop.
A denial-of-service issue in the dns implemenation could cause an infinite loop.
CVE-2025-1675High· 8.2The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
CVE-2025-1674High· 8.2A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
CVE-2025-1673High· 8.2A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.