CVE-2026-14256

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in ELAN TrackPoint Driver

Publication date: 2026-08-13

Last updated on: 2026-08-24

Assigner: Lenovo Group Ltd.

Description

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-24

Generated

2026-09-03

AI Q&A

2026-08-13

EPSS Evaluated

2026-09-01

NVD

CVE-2026-14256

EUVD

EUVD-2026-58062

Affected Vendors & Products

Vendor	Product	Version / Range
elan	trackpoint_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in the ELAN TrackPoint driver that could allow a local authenticated user to cause a system crash under certain circumstances.

Detection Guidance

Detection of this vulnerability requires checking for the presence of the vulnerable ELAN TrackPoint driver on your system. Review installed drivers and system logs for TrackPoint-related entries. No specific commands are provided in the available context.

Impact Analysis

A local authenticated user could exploit this to crash the system, potentially leading to denial of service or data loss if the crash causes unsaved work to be lost.

Compliance Impact

This vulnerability could potentially lead to system crashes, which may disrupt data processing or availability. However, the provided context does not specify direct impacts on compliance with GDPR or HIPAA. Compliance risks would depend on how the vulnerability is exploited in a specific environment.

Mitigation Strategies

Update or patch the ELAN TrackPoint driver to the latest version provided by the vendor. Disable the driver if not in use or restrict access to authenticated users only. Monitor system logs for unusual activity related to the driver.

Hi! I’m here to help you understand CVE-2026-14256. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70