CVE-2026-10644

creationtimestamp| type| source ---|---|--- 2026-06-28 06:18:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpddbuvvkh2o 2026-06-29 20:58:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphewshmpk2o...

CVE-2026-10644

The CVE describes an out-of-bounds write in Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c) used by the PIC32CM-JH family. When uart_rx_enable() is called with a one-byte receive buffer (len == 1) and CONFIG_UART_MCHP_ASYNC is enabled, the RX-complete ISR starts a single-be...