CVE-2026-123011
Received Received - Intake

Buffer Overflow in STMicroelectronics Android Sensors HAL

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: MITRE

Description
STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-123011
EUVD
EUVD-2026-117324

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
STMicroelectronics st-mems-android-linux-sensors-hal 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves STMicroelectronics' st-mems-android-linux-sensors-hal software not validating whether the number of sensor channels exceeds a safe limit. The affected component fails to check if the allowed channel count is exceeded, potentially leading to buffer overflows or other memory corruption issues.

Detection Guidance

This vulnerability can be detected by checking the version of st-mems-android-linux-sensors-hal on your system. If the version is before the commit 7bdf334, the vulnerability may exist. Use commands like 'git log' or inspect the installed package version to verify.

Impact Analysis

An attacker could exploit this to cause memory corruption, leading to crashes, data corruption, or unauthorized code execution on devices using the vulnerable sensor HAL. This may affect system stability and security.

Mitigation Strategies

Update st-mems-android-linux-sensors-hal to a version that includes commit 7bdf334 or later. This ensures proper channel limit checks and prevents potential buffer overflows.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-123011. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...