CVE-2022-1042: Zephyrproject Zephyr

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

Affected products

• Zephyrproject Zephyr: up to and including 3.0.0

Published 2022-07-26. Last modified 2026-06-17.