CVE-2021-3625

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363

• CWE-122
• CWE-787

• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363Exploit, Third Party Advisory
• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363Exploit, Third Party Advisory

Published

Oct 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36231Deserialization of untrusted data in multiple functions in M…8.8
• CVE-2021-36232Improper Authorization in multiple functions in MIK.starligh…8.8
• CVE-2021-36233The function AdminGetFirstFileContentByFilePath in MIK.starl…6.5
• CVE-2021-36234Use of a hard-coded cryptographic key in MIK.starlight 7.9.5…5.5
• CVE-2021-36235An issue was discovered in Ivanti Workspace Control before 1…7.8
• CVE-2021-3624There is an integer overflow vulnerability in dcraw. When th…7.8
• CVE-2021-3626The Windows version of Multipass before 1.7.0 allowed any lo…8.8
• CVE-2021-36260A command injection vulnerability in the web server of some …9.8
• CVE-2021-3627Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-36276Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains a…7.8
• CVE-2021-36277Dell Command | Update, Dell Update, and Alienware Update ver…7.8
• CVE-2021-36278Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1…5.5