CVE-2021-3454
4.3 MEDIUMTruncated L2CAP K-frame causes assertion failure
Published: 2021-10-19 · Last updated: 2026-06-17
Severity and scoring
- CVSS
- 4.3 MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CWE
- CWE-130, CWE-617
Affected products
| Vendor | Product |
|---|---|
| zephyrproject | zephyr |
Description
Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3
Source: NVD
References
Related CVEs
Same vendor
- CVE-2026-10635 — On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, ... (6.3 MEDIUM)
- CVE-2021-3455 — Disconnecting L2CAP channel right after invalid ATT request leads freeze (4.3 MEDIUM)
- CVE-2021-3330 — RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr (7.1 HIGH)
- CVE-2021-3323 — Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr (8.3 HIGH)
- CVE-2021-3322 — Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr (6.5 MEDIUM)
Same CWE
- CVE-2026-52718 — A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad (6.5 MEDIUM)
- CVE-2026-29116 — A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, ...
- CVE-2026-29115 — A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, tr...
- CVE-2026-46543 — Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm (5.3 MEDIUM)
- CVE-2026-46542 — Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm (4.3 MEDIUM)