CVE-2026-0138

In lwis_io_buffer_write (lwis_io_buffer.c), there is a vulnerability causing an out-of-bounds write due to memory corruption. This can lead to local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. The CVE is referenced in the ...

CVE-2025-36903

In lwisiobufferwrite, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...