[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhaQUWl2hfF__FaSy1_Y5y82n-R0DLTuGc_4GUuo8UBE":3,"g5a-ex:zephyrproject\u002Fzephyr@*":296,"g5a-family:zephyrproject\u002Fzephyr":298},{"success":4,"data":5},true,{"product":6,"versions":152,"topVulnerabilitiesByEpss":219,"kevVulnerabilities":273,"seoMetadata":274,"meta":293},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":151},"zephyrproject","zephyr",66,115,0,"2026-03-28",[14,17,19,22,24,26,28,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,72,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"1.10.0",1,{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":25,"cve_count":21,"kev_count":11,"has_kev":16},"1.12.0",{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},"1.14.0",3,{"version":32,"cve_count":30,"kev_count":11,"has_kev":16},"1.14.1",{"version":34,"cve_count":30,"kev_count":11,"has_kev":16},"1.14.2",{"version":36,"cve_count":21,"kev_count":11,"has_kev":16},"1.14.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.99",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.99",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.99",{"version":62,"cve_count":21,"kev_count":11,"has_kev":16},"1.9.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.2",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":70,"cve_count":71,"kev_count":11,"has_kev":16},"2.1.0",8,{"version":73,"cve_count":74,"kev_count":11,"has_kev":16},"2.2.0",2,{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":78,"cve_count":74,"kev_count":11,"has_kev":16},"2.4.0",{"version":80,"cve_count":74,"kev_count":11,"has_kev":16},"2.5.0",{"version":82,"cve_count":21,"kev_count":11,"has_kev":16},"2.5.1",{"version":84,"cve_count":21,"kev_count":11,"has_kev":16},"2.6.0",{"version":86,"cve_count":21,"kev_count":11,"has_kev":16},"2.6.1",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"2.79.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"2.81.0",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"2.82.0",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"2.83.0",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"2.84.0",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"2.85.0",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"2.86.0",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"2.87.0",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"2.88.0",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"2.89.0",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"2.90.0",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"2.91.0",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"2.92.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"2.93.0",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"2.94.0",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"2.95.0",{"version":122,"cve_count":21,"kev_count":11,"has_kev":16},"3.0.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.1",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.01",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.31",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.40",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.41",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":142,"cve_count":21,"kev_count":11,"has_kev":16},"3.5.0",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.0",{"version":146,"cve_count":30,"kev_count":11,"has_kev":16},"3.7.0",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"3.7.1",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.0","Zephyr by Zephyrproject is a technology product with 66 tracked versions and 115 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},{"version":25,"cve_count":21,"kev_count":11,"has_kev":16},{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},{"version":29,"cve_count":30,"kev_count":11,"has_kev":16},{"version":32,"cve_count":30,"kev_count":11,"has_kev":16},{"version":34,"cve_count":30,"kev_count":11,"has_kev":16},{"version":36,"cve_count":21,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":21,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":71,"kev_count":11,"has_kev":16},{"version":73,"cve_count":74,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":74,"kev_count":11,"has_kev":16},{"version":80,"cve_count":74,"kev_count":11,"has_kev":16},{"version":82,"cve_count":21,"kev_count":11,"has_kev":16},{"version":84,"cve_count":21,"kev_count":11,"has_kev":16},{"version":86,"cve_count":21,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":21,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":21,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":30,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},[220,228,232,235,240,245,251,257,262,268],{"cveId":221,"description":222,"publishedDate":223,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":227},"CVE-2020-10071","The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.","2020-06-05",9.8,"v3.1","Critical",0.03395,{"cveId":229,"description":230,"publishedDate":223,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":231},"CVE-2020-10070","In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",0.02879,{"cveId":233,"description":234,"publishedDate":223,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":231},"CVE-2020-10062","An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",{"cveId":236,"description":237,"publishedDate":238,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":239},"CVE-2020-10022","A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.","2020-05-11",0.02319,{"cveId":241,"description":242,"publishedDate":243,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":244},"CVE-2021-3625","Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fsecurity\u002Fadvisories\u002FGHSA-c3gr-hgvr-f363","2021-10-05",0.02312,{"cveId":246,"description":247,"publishedDate":223,"cvssScore":248,"cvssVersion":225,"severity":249,"isKev":16,"epssScore":250},"CVE-2020-10063","A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",7.5,"High",0.01803,{"cveId":252,"description":253,"publishedDate":254,"cvssScore":224,"cvssVersion":255,"severity":226,"isKev":16,"epssScore":256},"CVE-2017-14199","A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.","2019-04-12","v3.0",0.01725,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":224,"cvssVersion":255,"severity":226,"isKev":16,"epssScore":261},"CVE-2018-1000800","zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).","2018-09-06",0.01656,{"cveId":263,"description":264,"publishedDate":238,"cvssScore":265,"cvssVersion":225,"severity":266,"isKev":16,"epssScore":267},"CVE-2020-10060","In updatehub_probe, right after JSON parsing is complete, objects\\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.",6.5,"Medium",0.01559,{"cveId":269,"description":270,"publishedDate":271,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":272},"CVE-2023-3725","Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem","2023-10-06",0.01299,[],{"title":275,"metaDescription":276,"keywords":277,"structuredData":278},"Zephyr by Zephyrproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zephyr by Zephyrproject covering 66 versions with 115 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Zephyr vulnerabilities, Zephyr security, Zephyr CVE, Zephyrproject Zephyr, Zephyr threat intelligence, Zephyrproject security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":279,"@type":280,"name":281,"description":276,"url":282,"manufacturer":283,"applicationCategory":287,"softwareVersion":288,"mainEntity":289},"https:\u002F\u002Fschema.org","SoftwareApplication","Zephyr","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fzephyrproject\u002Fzephyr",{"@type":284,"name":285,"url":286},"Organization","Zephyrproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fzephyrproject","Security Software","66 versions tracked",{"@type":290,"name":291,"description":292,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Zephyr Security Vulnerabilities","Security vulnerabilities affecting Zephyr by Zephyrproject",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":294,"apiVersion":295},"2026-10-19T21:48:46.489Z","3.0",{"rows":297,"total":11,"capped":16,"failed":11},[],[]]