# Zephyr Project Zephyr OS vulnerabilities Source: https://junglewise.ai/threats/technologies/zephyr-os Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/zephyr-os.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 31 vulnerabilities in Zephyr Project Zephyr OS: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85032, was published on 3 November 2026. 4 vulnerabilities in the last four weeks, up 100% on the four before (2). ## Counts - Last 7 days: 0 - Last 30 days: 4 - Last 90 days: 7 - All time: 31 (0 critical, 0 exploited in the wild) ## About Zephyr Project Zephyr OS Open source real-time operating system designed for embedded and IoT devices. ## Latest Zephyr Project Zephyr OS vulnerabilities - [CVE-2026-85032: Zephyr MCTP over USB use-after-free in packet buffer handling](https://junglewise.ai/threats/cve-2026-85032-the-mctp-over-usb-device-class-in-subsys-pmci-mctp-mctp-usb-c) (medium, CVSS 4.8, published 3 Nov 2026) - [CVE-2026-79979: Zephyr arm64 MMU TLB invalidation memory isolation bypass](https://junglewise.ai/threats/cve-2026-79979-the-arm64-mmu-backend-invalidates-a-single-virtual-address-from) (high, CVSS 7.8, published 23 Oct 2026) - [CVE-2026-76787: Zephyr UpdateHub firmware client NULL pointer dereference in CoAP probe parsing](https://junglewise.ai/threats/cve-2026-76787-the-updatehub-firmware-over-the-air-client-parses-the-coap-probe) (medium, CVSS 5.9, published 19 Oct 2026) - [CVE-2026-75084: CC1200 sub-GHz IEEE 802.15.4 driver buffer overflow in RX packet parsing](https://junglewise.ai/threats/cve-2026-75084-the-cc1200-sub-ghz-ieee-802-15-4-driver-takes-the-phy-packet) (medium, CVSS 6.8, published 14 Oct 2026) - [CVE-2026-19739: Zephyr Bluetooth Link Layer memory leak in connection update](https://junglewise.ai/threats/cve-2026-19739-the-bluetooth-link-layer-control-procedure-code-in-subsys) (medium, CVSS 6.5, published 11 Oct 2026) - [CVE-2026-19738: Zephyr Project Bluetooth Link Layer Control Procedure memory leak in CIS creation](https://junglewise.ai/threats/cve-2026-19738-the-bluetooth-link-layer-control-procedure-llcp-implementation) (medium, CVSS 6.5, published 11 Oct 2026) - [CVE-2026-13216: Zephyr virtio PCI driver stack buffer overflow in capability parsing](https://junglewise.ai/threats/cve-2026-13216-zephyr-virtio-pci-driver-stack-buffer-overflow-in-capability) (medium, CVSS 6.1, published 25 Aug 2026) - [CVE-2026-12364: Zephyr OS logging system-call validation bypass](https://junglewise.ai/threats/cve-2026-12364-zephyr-os-logging-system-call-validation-bypass) (high, CVSS 8.4, published 14 Aug 2026) - [CVE-2026-10683: Zephyr OS Synopsys DesignWare I2C driver denial of service](https://junglewise.ai/threats/cve-2026-10683-zephyr-os-synopsys-designware-i2c-driver-denial-of-service) (low, CVSS 2.4, published 27 Jul 2026) - [CVE-2026-10679: Zephyr OS divide by zero in DesignWare SPI driver](https://junglewise.ai/threats/cve-2026-10679-zephyr-os-divide-by-zero-in-designware-spi-driver) (low, CVSS 3.3, published 21 Jul 2026) - [CVE-2026-10677: Zephyr OS kernel heap memory leak in z_vrfy_k_poll](https://junglewise.ai/threats/cve-2026-10677-zephyr-os-kernel-heap-memory-leak-in-z-vrfy-k-poll) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-10668: Zephyr OS Nuvoton NuMaker HSUSBD denial of service in USB driver](https://junglewise.ai/threats/cve-2026-10668-zephyr-os-nuvoton-numaker-hsusbd-denial-of-service-in-usb-driver) (low, CVSS 2.4, published 12 Jul 2026) - [CVE-2026-10666: Zephyr OS stack overflow in IPv4 and IPv6 address parsing](https://junglewise.ai/threats/cve-2026-10666-zephyr-os-stack-overflow-in-ipv4-and-ipv6-address-parsing) (high, CVSS 8.1, published 12 Jul 2026) - [CVE-2026-10660: Zephyr OS Bluetooth BAP Broadcast Assistant out-of-bounds write](https://junglewise.ai/threats/cve-2026-10660-zephyr-os-bluetooth-bap-broadcast-assistant-out-of-bounds-write) (medium, CVSS 6.4, published 11 Jul 2026) - [CVE-2026-10657: Zephyr OS out-of-bounds read in DNS resolver mDNS check](https://junglewise.ai/threats/cve-2026-10657-zephyr-os-out-of-bounds-read-in-dns-resolver-mdns-check) (low, CVSS 3.7, published 5 Jul 2026) - [CVE-2026-8023: Zephyr RTOS path traversal in HTTP server static-filesystem handler](https://junglewise.ai/threats/cve-2026-8023-zephyr-rtos-path-traversal-in-http-server-static-filesystem) (high, CVSS 7.5, published 29 Jun 2026) - [CVE-2026-10648: Zephyr OS NULL pointer dereference in MCUmgr serial transport](https://junglewise.ai/threats/cve-2026-10648-zephyr-os-null-pointer-dereference-in-mcumgr-serial-transport) (medium, CVSS 6.2, published 29 Jun 2026) - [CVE-2026-10658: Zephyr OS denial of service in Bluetooth Host ISO receive path](https://junglewise.ai/threats/cve-2026-10658-zephyr-os-denial-of-service-in-bluetooth-host-iso-receive-path) (high, CVSS 7.1, published 23 Jun 2026) - [CVE-2026-10645: Zephyr OS out-of-bounds read in ext2 directory-entry parser](https://junglewise.ai/threats/cve-2026-10645-zephyr-os-out-of-bounds-read-in-ext2-directory-entry-parser) (medium, CVSS 4.9, published 23 Jun 2026) - [CVE-2026-10687: Zephyr OS withdrawn vulnerability in unreleased development code](https://junglewise.ai/threats/cve-2026-10687-zephyr-os-withdrawn-vulnerability-in-unreleased-development-code) (info, CVSS 0, published 18 Jun 2026) - [CVE-2026-10639: Zephyr OS use-after-free in ICMPv4 echo request handler](https://junglewise.ai/threats/cve-2026-10639-zephyr-os-use-after-free-in-icmpv4-echo-request-handler) (medium, CVSS 4.8, published 16 Jun 2026) - [CVE-2026-10637: Zephyr OS use-after-free in IPv6 MLD send path](https://junglewise.ai/threats/cve-2026-10637-zephyr-os-use-after-free-in-ipv6-mld-send-path) (medium, CVSS 5.9, published 16 Jun 2026) - [CVE-2026-10636: Zephyr OS use-after-free in IPv4 IGMP implementation](https://junglewise.ai/threats/cve-2026-10636-zephyr-os-use-after-free-in-ipv4-igmp-implementation) (low, CVSS 3.7, published 16 Jun 2026) - [CVE-2026-10635: Zephyr OS use-after-free in Xtensa MMU page-table management](https://junglewise.ai/threats/cve-2026-10635-zephyr-os-use-after-free-in-xtensa-mmu-page-table-management) (medium, CVSS 6.3, published 16 Jun 2026) - [CVE-2026-10676: Zephyr OS unreachable defect in unreleased development code](https://junglewise.ai/threats/cve-2026-10676-zephyr-os-unreachable-defect-in-unreleased-development-code) (info, CVSS 0, published 12 Jun 2026) ## Most severe Zephyr Project Zephyr OS vulnerabilities - [CVE-2026-12364: Zephyr OS logging system-call validation bypass](https://junglewise.ai/threats/cve-2026-12364-zephyr-os-logging-system-call-validation-bypass) (high, CVSS 8.4, published 14 Aug 2026) - [CVE-2026-10666: Zephyr OS stack overflow in IPv4 and IPv6 address parsing](https://junglewise.ai/threats/cve-2026-10666-zephyr-os-stack-overflow-in-ipv4-and-ipv6-address-parsing) (high, CVSS 8.1, published 12 Jul 2026) - [CVE-2026-79979: Zephyr arm64 MMU TLB invalidation memory isolation bypass](https://junglewise.ai/threats/cve-2026-79979-the-arm64-mmu-backend-invalidates-a-single-virtual-address-from) (high, CVSS 7.8, published 23 Oct 2026) - [CVE-2026-5068: Zephyr OS out-of-bounds write in Bluetooth L2CAP LE CoC](https://junglewise.ai/threats/cve-2026-5068-zephyr-os-out-of-bounds-write-in-bluetooth-l2cap-le-coc) (high, CVSS 7.6, published 9 Jun 2026) - [CVE-2026-8023: Zephyr RTOS path traversal in HTTP server static-filesystem handler](https://junglewise.ai/threats/cve-2026-8023-zephyr-rtos-path-traversal-in-http-server-static-filesystem) (high, CVSS 7.5, published 29 Jun 2026) - [CVE-2026-10658: Zephyr OS denial of service in Bluetooth Host ISO receive path](https://junglewise.ai/threats/cve-2026-10658-zephyr-os-denial-of-service-in-bluetooth-host-iso-receive-path) (high, CVSS 7.1, published 23 Jun 2026) - [CVE-2026-75084: CC1200 sub-GHz IEEE 802.15.4 driver buffer overflow in RX packet parsing](https://junglewise.ai/threats/cve-2026-75084-the-cc1200-sub-ghz-ieee-802-15-4-driver-takes-the-phy-packet) (medium, CVSS 6.8, published 14 Oct 2026) - [CVE-2026-19739: Zephyr Bluetooth Link Layer memory leak in connection update](https://junglewise.ai/threats/cve-2026-19739-the-bluetooth-link-layer-control-procedure-code-in-subsys) (medium, CVSS 6.5, published 11 Oct 2026) - [CVE-2026-19738: Zephyr Project Bluetooth Link Layer Control Procedure memory leak in CIS creation](https://junglewise.ai/threats/cve-2026-19738-the-bluetooth-link-layer-control-procedure-llcp-implementation) (medium, CVSS 6.5, published 11 Oct 2026) - [CVE-2026-10677: Zephyr OS kernel heap memory leak in z_vrfy_k_poll](https://junglewise.ai/threats/cve-2026-10677-zephyr-os-kernel-heap-memory-leak-in-z-vrfy-k-poll) (medium, CVSS 6.5, published 21 Jul 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, up 100% on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 1 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 2 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 2 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Zephyr Project technologies - [Zephyr Project Zephyr](https://junglewise.ai/threats/technologies/zephyr): 95 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Zephyr Project Zephyr OS vulnerabilities", https://junglewise.ai/threats/technologies/zephyr-os, 13 November 2026.