Known Vulnerabilities for Zephyr by Zephyrproject-rtos
Listed below are 10 of the newest known vulnerabilities associated with "Zephyr" by "Zephyrproject-rtos".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90257 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: avoid OOB read of build info strin... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-76931 json | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter ... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-19569 json | dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel ob... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-19184 json | The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is express... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-18414 json | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field o... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-18413 json | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field o... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-17053 json | The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-17052 json | The Time-aware GPIO syscall verification handler z_vrfy_tgpio_pin_read_ts_ec() in drivers/timeaware_gpio/timeaware_gpio_handl... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-16515 json | net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (d... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-15924 json | Zephyr's TLS socket layer in subsys/net/lib/sockets/sockets_tls.c keeps a single process-global array, client_cache, of cache... | Not Provided | 2026-09-14 | 2026-09-14 |