← Back

CVE-2021-3510

nvd nist
Published: Oct 5, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-289f-7mw3-2qf4

Affected (22)

Zephyrproject
1 product
Zephyr
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Zephyrproject
Zephyr
Version 1.14.0
Zephyr
Version 1.14.0 rc1
Zephyr
Version 1.14.0 rc2
Zephyr
Version 1.14.0 rc3
Zephyr
Version 1.14.1
Zephyr
Version 1.14.1 rc1
Zephyr
Version 1.14.1 rc2
Zephyr
Version 1.14.1 rc3
Zephyr
Version 1.14.2
Zephyr
Version 1.14.3 rc1
Zephyr
Version 1.14.3 rc2
Zephyr
Version 2.5.0
Zephyr
Version 2.5.0 rc1
Zephyr
Version 2.5.0 rc2
Zephyr
Version 2.5.0 rc3
Zephyr
Version 2.5.0 rc4
Zephyr
Version 2.5.1 rc1
Zephyr
Version 2.6.0
Zephyr
Version 2.6.0 rc1
Zephyr
Version 2.6.0 rc2
Zephyr
Version 2.6.0 rc3
Zephyr
Version 2.6.1 rc1

Related CWEs

CWE-588
Attempt to Access Child of a Non-structure Pointer
Casting a non-structure type to a structure type and accessing a field can lead to memory access errors or data corruption.

References (2)

Source: vulnerabilities@zephyrproject.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.