Vulnerabilities (CVE)

Filtered by CWE-588
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3510 1 Zephyrproject 1 Zephyr 2024-11-21 5.0 MEDIUM 7.5 HIGH
Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4
CVE-2021-3319 1 Zephyrproject 1 Zephyr 2024-11-21 7.5 HIGH 6.5 MEDIUM
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364