CVE-2020-10058

—

CVSS 3.1

7.8 high

EPSS

<1%p33

Published

May 11, 2020 (May 11, 2020)

Modified

Jun 17, 2026

Description

Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.

Vendors: zephyrproject
Products: zephyr
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.