CVE-2021-3861

CVSS v3 Score
6.8
Medium
CVSS v2 Score
7.2
High

Vulnerability Description

The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj

CVSS:6.8(Medium)

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

CVSS:6.8(Medium)

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS:6.8(Medium)

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerabil...