591 matches found
ROS-20260804-73-0003
The vulnerability of the mtreportfixup function in the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure through the use of a specially connected HID device...
Linux kernel HID Alps Buffer Overflow
The vulnerability in the alpsrawevent function within drivers/hid/hid-alps.c of the Linux kernel’s user interface subsystem driver is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
...
HID: lg-g15: cancel pending work on remove to fix a use-after-free
...
SUSE CVE-2026-64367
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
UBUNTU-CVE-2026-64367
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
CVE-2026-64366 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...
CVE-2026-64364
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...
CVE-2026-64362
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...
PT-2026-64586
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the HID letsketch driver. The letsketch probe function initializes a per-device timer inrange timer using timer setup, which is subsequently re-armed...
Linux Distros Unpatched Vulnerability : CVE-2026-64365
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrangetimer at driver unbind letsketchdriver does not provide a...
Astra Linux – Vulnerability in Chromium
The use of after-free in HID in Google Chrome before version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Critical...
CVE-2026-63947
A flaw was found in the Linux kernel's Bluetooth Human Interface Device Protocol HIDP. A remote attacker, by sending specially crafted truncated packets from a paired Bluetooth device, could trigger an out-of-bounds read in the hidpinputreport function. This vulnerability may lead to unintended...
CVE-2026-63916
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that the HIDDGINPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify...
PT-2026-61233
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function. The issue occurs because the function assumes the HID DG INPUTMODE usage is always located in the first field...
Windows HID Disclosure
The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...
EUVD-2026-43886
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
CVE-2026-50310
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
