Linux Distros Unpatched Vulnerability : CVE-2026-26399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-use-after-return issue exists in the ArduinoCoreSTM32 library prior to version 1.7.0. The pwmstart function allocates a TIMHandleTypeDef structure on th...

CVE-2026-26399

The Arduino_Core_STM32 library, within the stm32duino project and STMicroelectronics ecosystem, contains a stack-use-after-return vulnerability (CWE-562) in versions prior to v1.7.0 . The issue resides in the pwm_start() function (specifically in cores/arduino/stm32/analog.c), where a TIM_HandleT...

PT-2026-7491

A stack-use-after-return issue exists in the Arduino Core STM32 library prior to version 1.7.0. The pwm start function allocates a TIM HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the functi...