CVE Feed

    Dashboard / CVE / CVE-2026-4179

    CVE-2026-4179

    Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.

    Published:Mar 14, 2026
    Last Modified:Apr 3, 2026
    EPS:Mar 14, 2026
    EPSS Score:0.00006
    CVSS Score:6.1

    Affected Products

    Vendor
    Zephyrproject
    Product
    Zephyr
    Vendor
    Zephyrproject-rtos
    Product
    Zephyr

    Exploits

    https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xg7-g3q3-9prfhttps://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xg7-g3q3-9prf

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-15461 (CVSS 5.3) — The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl7…
    CVE-2026-15460 (CVSS 5.4) — The Bluetooth Classic (BR/EDR) L2CAP receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap…
    CVE-2026-14697 (CVSS 6.5) — net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When …
    CVE-2026-14696 (CVSS 6.5) — When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/et…
    CVE-2026-14368 (CVSS 5.4) — The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON s…
    CVE-2026-14367 (CVSS 3.1) — The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-…
    CVE-2026-14366 (CVSS 6.4) — The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c…
    CVE-2026-13735 (CVSS 3.7) — Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c mishandled keepalive packets. In wg_…
    CVE-2026-13734 (CVSS 6.5) — Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_cry…
    CVE-2026-13481 (CVSS 5.4) — The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME managemen…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High