Zephyr vulnerabilities

4 published CVEs name Zephyr among the affected products.

Critical 1High 2Medium 0Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2022-3333
Zephyr Project Manager REST Call cross site scripting
Zephyr · Project Manager
Low3.5
CVE-2017-14201
The shell DNS command can cause unpredictable results due to misuse of stack variables.
Zephyr · shell
High7.8
CVE-2017-14202
The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.
Zephyr · shell
High7.8
CVE-2017-14199
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
Zephyr · getaddrinfo
Critical9.8