CVE-2021-3455

Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp

• CWE-416
• CWE-416

• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vpExploit, Third Party Advisory
• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vpExploit, Third Party Advisory

Published

Oct 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34543The web administration server in Solar-Log 500 before 2.8.2 …7.5
• CVE-2021-34544An issue was discovered in Solar-Log 500 before 2.8.2 Build …6.5
• CVE-2021-34546An unauthenticated attacker with physical access to a comput…6.8
• CVE-2021-34547PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF …4.3
• CVE-2021-34548An issue was discovered in Tor before 0.4.6.5, aka TROVE-202…7.5
• CVE-2021-34549An issue was discovered in Tor before 0.4.6.5, aka TROVE-202…7.5
• CVE-2021-34550An issue was discovered in Tor before 0.4.6.5, aka TROVE-202…7.5
• CVE-2021-34551PHPMailer before 6.5.0 on Windows allows remote code executi…8.1
• CVE-2021-34552Pillow through 8.2.0 and PIL (aka Python Imaging Library) th…9.8
• CVE-2021-34553Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a…4.3
• CVE-2021-34555OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause…7.5
• CVE-2021-34556In the Linux kernel through 5.13.7, an unprivileged BPF prog…5.5