CVE-2020-10067

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

• CWE-190
• CWE-190

• https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067
• https://github.com/zephyrproject-rtos/zephyr/pull/23239Patch, Third Party Advisory
• https://github.com/zephyrproject-rtos/zephyr/pull/23653Patch, Third Party Advisory
• https://github.com/zephyrproject-rtos/zephyr/pull/23654Patch, Third Party Advisory
• https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27Third Party Advisory
• https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067
• https://github.com/zephyrproject-rtos/zephyr/pull/23239Patch, Third Party Advisory
• https://github.com/zephyrproject-rtos/zephyr/pull/23653Patch, Third Party Advisory
• https://github.com/zephyrproject-rtos/zephyr/pull/23654Patch, Third Party Advisory
• https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27Third Party Advisory

Published

May 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10061Improper handling of the full-buffer case in the Zephyr Blue…8.8
• CVE-2020-10062An off-by-one error in the Zephyr project MQTT packet length…9.8
• CVE-2020-10063A remote adversary with the ability to send arbitrary CoAP p…7.5
• CVE-2020-10064Improper Input Frame Validation in ieee802154 Processing. Ze…9.8
• CVE-2020-10065Missing Size Checks in Bluetooth HCI over SPI. Zephyr versio…8.8
• CVE-2020-10066Incorrect Error Handling in Bluetooth HCI core. Zephyr versi…5.7
• CVE-2020-10068In the Zephyr project Bluetooth subsystem, certain duplicate…6.5
• CVE-2020-10069Zephyr Bluetooth unchecked packet data results in denial of …6.5
• CVE-2020-1007An information disclosure vulnerability exists when the Wind…5.5
• CVE-2020-10070In the Zephyr Project MQTT code, improper bounds checking ca…9.8
• CVE-2020-10071The Zephyr MQTT parsing code performs insufficient checking …9.8
• CVE-2020-10072Improper Handling of Insufficient Permissions or Privileges …5.3