CVE-2026-63916
Received Received - Intake

Out-of-Bounds Write in Linux Kernel Wacom Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_mode() wacom_hid_set_device_mode() currently assumes that the HID_DG_INPUTMODE usage is always located in the first field (field[0]) of the feature report. However, a device can specify HID_DG_INPUTMODE in a different field. If HID_DG_INPUTMODE is in a field other than the first one and the first field has a report_count smaller than the usage_index of HID_DG_INPUTMODE, this leads to an out-of-bounds write to r->field[0]->value. Fix this by storing the field index of HID_DG_INPUTMODE in 'struct hid_data' during feature mapping. In wacom_hid_set_device_mode(), use this stored field index to access the correct field and add bounds checks to ensure both the field index and the value index are within valid ranges before writing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63916
EUVD
EUVD-2026-45689

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wacom wacom_hid *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds write vulnerability in the Linux kernel's HID driver for Wacom devices. The function wacom_hid_set_device_mode() incorrectly assumes the HID_DG_INPUTMODE usage is always in the first field of a feature report. If it's in a different field and the first field's report_count is too small, it causes a write beyond allocated memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID wacom driver and requires kernel-level inspection. Detection involves checking kernel logs for OOB write errors or examining the wacom driver code for improper field access. No direct network detection commands are applicable.

Impact Analysis

This could allow an attacker with physical or local access to a system with a vulnerable Wacom device to execute arbitrary code or cause a system crash. It may lead to privilege escalation or denial of service if exploited.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel memory corruption issue in the Linux HID subsystem. Compliance impacts would only occur if this vulnerability were exploited to gain unauthorized access to sensitive data or disrupt system integrity, which is not described in the provided context.

Mitigation Strategies

Apply the kernel patch that fixes the OOB write in wacom_hid_set_device_mode(). Update to a patched kernel version. If immediate patching is not possible, disable the wacom driver or restrict access to affected devices until the fix is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63916. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart