Zephyr

Zephyr

The Zephyr Project is a scalable real-time operating system (RTOS) supporting multiple hardware architectures, optimized for resource constrained devices, and built with security in mind.

The Zephyr OS is based on a small-footprint kernel designed for use on resource-constrained systems: from simple embedded environmental sensors and LED wearables to sophisticated smart watches and IoT wireless gateways.

The Zephyr kernel supports multiple architectures, including ARM (Cortex-A, Cortex-R, Cortex-M), Intel x86, ARC, Nios II, Tensilica Xtensa, and RISC-V, SPARC, MIPS, and a large number of supported boards.

CVEs

CVE	Details	Patch	POC	Type
2020-10064	github-security	38970c	POC	CWE-121 CWE-122
2020-10065	github-security	9778f0c	POC	CWE-130
2020-10066	github-security	e1dddf	POC	CWE-476
2021-3319	github-security	6f1ab9	POC	CWE-476 CWE-588
2021-3320	github-security	0ebd3	POC	CWE-476
2021-3321	github-security	606807	POC	CWE-680
2021-3322	github-security	2a423,6917d	POC	CWE-476
2021-3323	github-security	f729f82	POC	CWE-191
2021-3329	issue	9d5c36	POC	CWE-703
2021-3330	github-security	a98076	POC	CWE-787
2022-3806	github-security		hoedur	CWE-415
2023-0397	github-security	ac3dec5	hoedur	CWE-703
2023-1422	writeup		hoedur	Dangling Pointer
2023-1423	writeup		hoedur	Dangling Pointer
2023-1901	github-security	pr/56709	hoedur	CWE-121
2023-1902	github-security	pr/56709	hoedur	CWE-400
2023-0359	github-security	pr/53931	hoedur	CWE-20
CVE-2024-6444	github-security	PR		CWE-122
CVE-2024-6443	github-security	PR		CWE-125 CWE-787
CVE-2024-6442	github-security	PR		CWE-787
CVE-2024-6259	github-security	PR		CWE-20 CWE-122
CVE-2024-6258	github-security	PR		CWE-20 CWE-122 CWE-191
CVE-2024-6137	github-security	PR		CWE-20 CWE-121 CWE-787
CVE-2024-6135	github-security	PR		CWE-122
CVE-2024-5931	github-security	PR		CWE-20 CWE-121
CVE-2024-5754	github-security	PR		CWE-200
CVE-2024-4785	github-security	PR		CWE-20 CWE-369
CVE-2024-43916		patch		CWE-639
CVE-2024-43915		patch		CWE-79
CVE-2024-43322		patch		CWE-639
CVE-2024-38761		patch		CWE-200
CVE-2024-37484		patch		CWE-269
CVE-2024-3332	github-security	PR		CWE-476
CVE-2024-3077	github-security	PR		CWE-126 CWE-190
CVE-2024-1638	github-security	PR		CWE-20
CVE-2023-7060	github-security
CVE-2023-6881	github-security	PR		CWE-120
CVE-2023-6749	github-security	PR		CWE-121
CVE-2023-6249	github-security	PR		CWE-704
CVE-2023-5779	github-security			CWE-787
CVE-2023-5753	github-security	PR		CWE-120 CWE-191
CVE-2023-5563	github-security	PR		CWE-703
CVE-2023-5184	github-security			CWE-120 CWE-195
CVE-2023-5139	github-security			CWE-120
CVE-2023-4265	github-security			CWE-120
CVE-2023-4264	github-security	PR		CWE-120 CWE-121 CWE-122
CVE-2023-4263	github-security	PR		CWE-120 CWE-121
CVE-2023-4262	github-security
CVE-2023-4260	github-security	PR		CWE-120 CWE-193
CVE-2023-4259	github-security	PR		CWE-120 CWE-193
CVE-2023-4258	github-security	PR		CWE-684
CVE-2023-4257	github-security	PR		CWE-120 CWE-131
CVE-2023-3725	github-security			CWE-120 CWE-121
CVE-2023-2234	github-security			CWE-843
CVE-2023-1902	github-security			CWE-416
CVE-2023-1901	github-security			CWE-787
CVE-2023-0779	github-security		SplITS	CWE-20
CVE-2023-0397	github-security			CWE-703
CVE-2023-0396	githubsecurity			CWE-126
CVE-2022-3806	githubsecurity			CWE-415
CVE-2022-2993	githubsecurity
CVE-2022-2741	githubsecurity	PR		CWE-400
CVE-2022-1841	githubsecurity	PR		CWE-787
CVE-2022-1042	githubsecurity	PR		CWE-787
CVE-2022-1041	githubsecurity	PR		CWE-787
CVE-2021-3861	githubsecurity	PR		CWE-122
CVE-2021-3835	githubsecurity	PR		CWE-122
CVE-2021-3625	githubsecurity	PR		CWE-122
CVE-2021-3581	githubsecurity	PR		CWE-805
CVE-2021-3510	githubsecurity	PR		CWE-588
CVE-2021-3455				CWE-416
CVE-2021-3454				CWE-130 CWE-617
CVE-2021-3436	githubsecurity	PR		CWE-694
CVE-2021-3330	githubsecurity	PR		CWE-787
CVE-2021-3323				CWE-191
CVE-2021-3322	githubsecurity	commit		CWE-476
CVE-2021-3321	githubsecurity	PR		CWE-680
CVE-2021-3320	githubsecurity	PR		CWE-476
CVE-2021-3319	githubsecurity	PR		CWE-476 CWE-588
CVE-2020-13603	githubsecurity	PR		CWE-190
CVE-2020-13602	githubsecurity	PR		CWE-20 CWE-835
CVE-2020-13601	githubsecurity	PR		CWE-125
CVE-2020-13600	githubsecurity	PR		CWE-122
CVE-2020-13599	githubsecurity	PR		CWE-276
CVE-2020-13598	githubsecurity	PR		CWE-121
CVE-2020-10072	githubsecurity	PR		CWE-280
CVE-2020-10071		PR		CWE-120 CWE-129
CVE-2020-10070		PR		CWE-120 CWE-190
CVE-2020-10069	githubsecurity	PR		CWE-233
CVE-2020-10068	zproject			CWE-20
CVE-2020-10067	zproject			CWE-190
CVE-2020-10066	githubsecurity	PR		CWE-476
CVE-2020-10065	githubsecurity	PR		CWE-130
CVE-2020-10064	githubsecurity	PR		CWE-121 CWE-122
CVE-2020-10063	zproject			CWE-190
CVE-2020-10062	zproject			CWE-193
CVE-2020-10061	zproject			CWE-119
CVE-2020-10060	zprpject			CWE-119
CVE-2020-10059	zproject			CWE-295
CVE-2020-10058	zproject			CWE-20
CVE-2020-10028	zproject			CWE-20
CVE-2020-10027	zproject			CWE-697
CVE-2020-10024	zproject			CWE-697
CVE-2020-10023	zproject			CWE-120
CVE-2020-10022	zproject			CWE-120
CVE-2020-10021	zproject			CWE-787
CVE-2020-10019	zproject			CWE-120
CVE-2019-9506	zproject			CWE-310
CVE-2018-1000800	issue			CWE-476
CVE-2017-14202	zproject			CWE-119
CVE-2017-14201	zproject			CWE-416
CVE-2017-14199		PR		CWE-119

Getting Started

Welcome to Zephyr! See the Introduction to Zephyr for a high-level overview, and the documentation's Getting Started Guide to start developing.

📖 Zephyr Documentation 🚀 Getting Started Guide 🙋🏽 Tips when asking for help 💻 Code samples

Code and Development

🌐 Source Code Repository 📦 Releases 🤝 Contribution Guide

Community and Support

💬 Discord Server for real-time community discussions 📧 User mailing list ([email protected]) 📧 Developer mailing list ([email protected]) 📬 Other project mailing lists 📚 Project Wiki

Issue Tracking and Security

🐛 GitHub Issues 🔒 Security documentation 🛡️ Security Advisories Repository ⚠️ Report security vulnerabilities at [email protected]

Additional Resources

🌐 Zephyr Project Website 📺 Zephyr Tech Talks