CVE-2021-3320

Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7

• CWE-476
• CWE-476
• CWE-843

• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7Third Party Advisory
• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7Third Party Advisory

Published

May 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33194golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 a…7.5
• CVE-2021-33195Go before 1.15.13 and 1.16.x before 1.16.5 has functions for…7.3
• CVE-2021-33196In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5…7.5
• CVE-2021-33197In Go before 1.15.13 and 1.16.x before 1.16.5, some configur…5.3
• CVE-2021-33198In Go before 1.15.13 and 1.16.x before 1.16.5, there can be …7.5
• CVE-2021-33199In Expression Engine before 6.0.3, addonIcon in Addons/file/…9.8
• CVE-2021-33200kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enf…7.8
• CVE-2021-33203Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.…4.9
• CVE-2021-33204In the pg_partman (aka PG Partition Manager) extension befor…9.8
• CVE-2021-33205Western Digital EdgeRover before 0.25 has an escalation of p…8.8
• CVE-2021-33207The HTTP client in MashZone NextGen through 10.7 GA deserial…9.8
• CVE-2021-33208The "Register an Ehcache Configuration File" admin feature i…7.2