PT-2022-10713

CVE-2021-3835

Published

2022-02-07

Updated

2022-02-11

Description by

CVSS 3.1

8.8

High

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr versions >= v2.6.0

Description The issue is related to a buffer overflow in the USB device class, specifically a heap-based buffer overflow. This is classified as CWE-122.

Recommendations For Zephyr versions >= v2.6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ceolin

Szymonh

Vendors

Affected products

Weakness enumeration

CWE-122: Heap-based Buffer Overflow

CWE-787: Out-of-bounds Write

Related identifiers