Z
Vendor security profile
zephyrproject-rtos
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit2
Patch rate%29
Avg. CVSS7.3
12-month vulnerability rate
4
1
1
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
14toplam CVE
High10 (71%)
Medium4 (29%)
Patch and exploitation view
%29
Verified patch
%0
CISA KEV
%14
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
6.5
CVE-2025-12899
net: icmp: Out of bound memory read
Z
Patch status unknownEPSS %0
6.5
CVE-2025-12035
Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP
Z
Patch status unknownEPSS %0
7.6
CVE-2025-9557
Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont
Z
Patch status unknownEPSS %0
7.6
CVE-2025-9558
Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start
Z
Patch status unknownEPSS %0
8.2
CVE-2025-9408
Userspace privilege escalation vulnerability on Cortex M
Z
Patch status unknownEPSS %0
6.5
CVE-2025-12890
Bluetooth: peripheral: Invalid handling of malformed connection request
Z
Patch status unknownEPSS %0
7.1
CVE-2025-10456
Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests
Z
Patch verifiedEPSS %0
7.6
CVE-2025-10458
Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values
Z
Patch status unknownEPSS %0
7.6
CVE-2025-7403
Bluetooth: bt_conn_tx_processor unsafe handling
Z
Patch verifiedEPSS %0
4.3
CVE-2025-10457
Bluetooth: Out-Of-Context le_conn_rsp Handling
Z
Patch status unknownEPSS %0