CVE-2026-18413

The NXP MCUX LPADC ADC driver is vulnerable to an out-of-bounds write due to a missing buffer size validation in mcux_lpadc_start_read(). The driver fails to verify that the destination buffer is large enough for the requested sampling sequence. In builds with CONFIG_USERSPACE , an unprivileged u...

CVE-2026-18413 Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

CVE-2026-18413 Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...