How severe is CVE-2024-11263?

CVE-2024-11263 has a CVSS 3.x base score of 9.3, rated critical severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2024-11263 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-11263?

CVE-2024-11263 affects Zephyrproject Zephyr. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-11263?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2024-11263 have an EU (EUVD) identifier?

Yes. CVE-2024-11263 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-33714.

When was CVE-2024-11263 published?

CVE-2024-11263 was published on 2024-11-15 and last updated on 2026-06-17.

CVE-2024-11263

CVE-2024-11263 is a critical-severity vulnerability in Zephyrproject Zephyr with a CVSS 3.x base score of 9.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-270.

Key facts

Severity: Critical (CVSS 3.x base score 9.3)
EPSS exploit prediction: 0% (6th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-33714
Weakness: CWE-270
Affected product: Zephyrproject Zephyr
Published: 2024-11-15
Last modified: 2026-06-17

Description

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Frequently asked questions

What is CVE-2024-11263?: When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.
How severe is CVE-2024-11263?: CVE-2024-11263 has a CVSS 3.x base score of 9.3, rated critical severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2024-11263 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-11263?: CVE-2024-11263 affects Zephyrproject Zephyr. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-11263?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2024-11263 have an EU (EUVD) identifier?: Yes. CVE-2024-11263 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-33714.
When was CVE-2024-11263 published?: CVE-2024-11263 was published on 2024-11-15 and last updated on 2026-06-17.

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9

Affected products (1)

cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*

More vulnerabilities in Zephyrproject Zephyr

CVE-2026-5067 — Critical (CVSS 9.8): A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by…
CVE-2022-3806 — Critical (CVSS 9.8): Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.
CVE-2017-14199 — Critical (CVSS 9.8): A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
CVE-2018-1000800 — Critical (CVSS 9.8): zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(),…
CVE-2021-3329 — Critical (CVSS 9.6): Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack
CVE-2023-0397 — Critical (CVSS 9.6): A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in…

All CVEs affecting Zephyrproject Zephyr →

Other CWE-270 vulnerabilities

CVE-2023-37912 — Critical (CVSS 9.9): XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior…
CVE-2023-25754 — Critical (CVSS 9.8): Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache…
CVE-2024-36513 — High (CVSS 8.2): A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version…
CVE-2017-2663 — High (CVSS 8.2): It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the…
CVE-2025-9408 — High (CVSS 8.1): System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege…
CVE-2024-46975 — High (CVSS 7.9): Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data…

Browse all CWE-270 vulnerabilities →