VULNERABILITY INTELLIGENCE

CVE-2021-3861

CVSS score8.2 HIGH

EPSS probability0.48%

CISA KEVNot currently listed

Published2022-02-07

Last modified2026-06-17

Description

The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj