Zephyrproject

Zephyr is a real-time operating system and embedded-systems framework widely deployed across IoT devices, microcontrollers, and edge platforms, creating a distributed and heterogeneous attack surface spanning numerous downstream products. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and concentrate in memory-safety weaknesses including out-of-bounds writes, classic and heap-based buffer overflows, stack-based buffer overflows, and improper input validation—classes endemic to systems-level code and bare-metal environments where bounds checking is often minimal or absent. The recurring exposure pattern reflects Zephyr's role as a foundational OS layer and its use across deeply embedded and resource-constrained devices where remediation cycles are lengthy and fragmented; defenders should treat patches for this vendor as broadly applicable to the embedded and IoT tier of their infrastructure. Live severity, exploitation, and exposure counts are shown alongside this summary.