[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftKA-h6V4nLd6inul93fsLsXH3FOwC7KIsGLoCquCfCQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":81,"topProductsByCves":82,"seoMetadata":85,"meta":94},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":25},36688,"zephyrproject",2,115,0,88,"2026-03-28","z",[16,20],{"id":17,"product_name":18,"version_count":19,"cve_count":10,"kev_count":11,"last_cve_update":13},175552,"zephyr",66,{"id":21,"product_name":22,"version_count":23,"cve_count":11,"kev_count":11,"last_cve_update":24},175553,"zephyr_project_manager",22,null,"Zephyrproject is a technology vendor with 2 tracked products and 115 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[27,36,40,43,48,53,59,65,70,76],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":35},"CVE-2020-10071","The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.","2020-06-05",9.8,"v3.1","Critical",false,0.03395,{"cveId":37,"description":38,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":39},"CVE-2020-10070","In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",0.02879,{"cveId":41,"description":42,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":39},"CVE-2020-10062","An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",{"cveId":44,"description":45,"publishedDate":46,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":47},"CVE-2020-10022","A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.","2020-05-11",0.02319,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":52},"CVE-2021-3625","Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fsecurity\u002Fadvisories\u002FGHSA-c3gr-hgvr-f363","2021-10-05",0.02312,{"cveId":54,"description":55,"publishedDate":30,"cvssScore":56,"cvssVersion":32,"severity":57,"isKev":34,"epssScore":58},"CVE-2020-10063","A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.",7.5,"High",0.01803,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":31,"cvssVersion":63,"severity":33,"isKev":34,"epssScore":64},"CVE-2017-14199","A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.","2019-04-12","v3.0",0.01725,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":31,"cvssVersion":63,"severity":33,"isKev":34,"epssScore":69},"CVE-2018-1000800","zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).","2018-09-06",0.01656,{"cveId":71,"description":72,"publishedDate":46,"cvssScore":73,"cvssVersion":32,"severity":74,"isKev":34,"epssScore":75},"CVE-2020-10060","In updatehub_probe, right after JSON parsing is complete, objects\\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.",6.5,"Medium",0.01559,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":80},"CVE-2023-3725","Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem","2023-10-06",0.01299,[],[83,84],{"id":17,"product_name":18,"version_count":19,"cve_count":10,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":11,"kev_count":11,"last_cve_update":24},{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Zephyrproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zephyrproject covering 2 products with 115 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Zephyrproject vulnerabilities, Zephyrproject security, Zephyrproject CVE, Zephyrproject threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93},"https:\u002F\u002Fschema.org","Organization","Zephyrproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fzephyrproject",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":95,"apiVersion":96},"2026-10-19T21:47:43.979Z","3.0"]