CVE-2026-0142

CVE-2026-0142 involves an out-of-bounds read in iavb_parse_key_data within avb_rsa.c, caused by improper input validation. This could allow local information disclosure without user interaction and without needing additional privileges. Connected sources (OSV entry) specify the affected function ...