# Zephyrproject Zephyr


- [CVE-2026-5067](https://insights.sbomify.com/CVE-2026-5067/): Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key (critical 9.8)
- [CVE-2022-3806](https://insights.sbomify.com/CVE-2022-3806/): Bluetooth HCI Error Handling Double Free (critical 9.8)
- [CVE-2017-14199](https://insights.sbomify.com/CVE-2017-14199/): Memory corruption in getaddrinfo (critical 9.8)
- [CVE-2018-1000800](https://insights.sbomify.com/CVE-2018-1000800/): Null dereference in n/a (critical 9.8)
- [CVE-2021-3329](https://insights.sbomify.com/CVE-2021-3329/): DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer (critical 9.6)
- [CVE-2023-0397](https://insights.sbomify.com/CVE-2023-0397/): DoS: Invalid Initialization in le_read_buffer_size_complete (critical 9.6)
- [CVE-2021-3966](https://insights.sbomify.com/CVE-2021-3966/): Usb bluetooth device ACL read cb buffer overflow (critical 9.6)
- [CVE-2021-3625](https://insights.sbomify.com/CVE-2021-3625/): Buffer overflow in Zephyr USB DFU DNLOAD (critical 9.6)
- [CVE-2026-1678](https://insights.sbomify.com/CVE-2026-1678/): dns: memory‑safety issue in the DNS name parser (critical 9.4)
- [CVE-2024-11263](https://insights.sbomify.com/CVE-2024-11263/): arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y (critical 9.4)
- [CVE-2020-13601](https://insights.sbomify.com/CVE-2020-13601/): Possible read out of bounds in dns read (critical 9.0)
- [CVE-2020-10062](https://insights.sbomify.com/CVE-2020-10062/): Packet length decoding error in MQTT (critical 9.0)

---
From sbomify Insights: https://insights.sbomify.com/products/zephyrproject/zephyr/