CVE-2026-42807
Awaiting Analysis Awaiting Analysis - Queue

Heap Overflow in BoschSensortec COINES SDK

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: Robert Bosch GmbH

Description
A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) or potentially execute arbitrary code. The bridge decoder ({{bridge_decoder.c}}) trusts the packet length field provided by the external device and forwards it to the host response queue ({{mqueue_add_data}}) without validating the bounds of the destination buffer. A malicious or compromised USB or Bluetooth Low Energy (BLE) peripheral can advertise a payload size up to ~3 KB, which exceeds the default queue slot size of 255 bytes. This results in an unbounded heap overwrite ({{memcpy}}), corrupting adjacent heap metadata on the host system when processing the device's response.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-30
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-29
NVD
CVE-2026-42807
EUVD
EUVD-2026-75363

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
boschsensortec coines_sdk From 2.10 (inc) to 2.12.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a heap-based buffer overflow in BoschSensortec COINES_SDK versions 2.10 through 2.12.2. The vulnerability occurs in the PC bridge protocol decoder where an attacker can send a malicious payload via USB or BLE that exceeds the expected buffer size. The decoder does not validate the packet length, leading to a heap overwrite that can crash the process or allow arbitrary code execution.

Detection Guidance

This vulnerability involves a heap-based buffer overflow in the PC bridge protocol decoder of BoschSensortec COINES_SDK. Detection requires monitoring for crashes or memory corruption when processing USB or BLE peripheral responses. Check for process crashes during device communication and inspect heap metadata corruption. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to cause a denial of service by crashing the affected system or execute arbitrary code, potentially gaining control over the device. This is possible if the device is connected to a malicious or compromised USB or BLE peripheral.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling arbitrary code execution or denial of service on host systems. A successful exploit may lead to unauthorized data access, modification, or loss, which are critical violations under these regulations. The lack of input validation in the PC bridge protocol decoder increases the risk of such incidents.

Mitigation Strategies

Update COINES_SDK to a version outside the affected range (2.10 through 2.12.2) to patch the heap-based buffer overflow in the bridge protocol decoder.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-42807. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart