1968 matches found
CVE-2026-63934
The CVE-2026-63934 entry describes a Linux kernel vulnerability in iio: gyro: itg3200 where i2c_read writes into the wrong stack location. Specifically, itg3200_read_all_channels() takes __be16 *buf and uses (char *)&buf for i2c_transfer(), which points to a local stack slot rather than the calle...
CVE-2026-63932
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19breceivebuf appends each serdev chunk into the fixed MHZ19BCMDSIZE receive buffer and advances bufidx by len without checking that the chunk fits in the remaining space....
CVE-2026-63932 iio: chemical: mhz19b: reject oversized serial replies
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19breceivebuf appends each serdev chunk into the fixed MHZ19BCMDSIZE receive buffer and advances bufidx by len without checking that the chunk fits in the remaining space....
CVE-2026-63930 iio: buffer: hw-consumer: fix use-after-free in error path
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of iiohwconsumeralloc, the code was using listforeachentry to iterate through buffers while calling iiobufferput which can free the...
CVE-2026-53387
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075itms index veml6075itms has 5 elements but VEML6075CONFIT can yield values 0-7. If it returns a value = 5, this causes an out-of-bounds array access. Add a bounds check and return...
CVE-2026-53387
In the Linux kernel, the vulnerability CVE-2026-53387 affects the IIO light driver for veml6075. The issue arises in veml6075_it_ms indexing: veml6075_it_ms has 5 elements, but VEML6075_CONF_IT can yield 0–7, which can lead to an out-of-bounds access when the index is >= 5. The fix adds a boun...
EUVD-2026-45452
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856initcontrols The control handler wasn't freed if adding controls failed, add an error exit label and convert the existing error return to use it...
CVE-2026-53379
Technical details for CVE-2026-53379 are not provided in the supplied documents. Monitor for updates.
PT-2026-61282
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack leak exists in the bmp580 trigger handler function. The function declares a scan buffer on the stack without an initializer and uses memcpy to copy 3 bytes of 24-bit sensor data...
PT-2026-61249
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mhz19b receive buf function where serial data chunks are appended to the fixed MHZ19B CMD SIZE receive buffer without verifying if the chunk fits in the remaining...
PT-2026-61248
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the kernel when a user writes a zero fractional part to the sampling frequency sysfs attribute. This happens within the write raw function of the scd30...
PT-2026-61250
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the kernel when a user writes zero to the sampling frequency sysfs attribute. This happens within the write raw function of the adis16260 gyro driver because...
The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?
Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move...
CVE-2026-46459
ICU Scandinavia Boomerang is affected by a missing authentication vulnerability in its device receiver endpoints. An unauthenticated remote attacker can read full facility configurations and write unauthorized data to the sensor database. The issue is mitigated by upgrading to version 2.4.18.029....
CVE-2026-46459 Missing Authorization in ICU Scandinavia Boomerang
ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...
EUVD-2026-44667
ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...
CVE-2026-58619
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50367
Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-58619
CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...