← CVE Intelligence

CVE-2026-0849

crypto: ATAES132A response length allows stack buffer overflow PUBLISHED

Description (CNA)

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution.

Affected (CNA)

Vendor / productVersions
zephyrproject-rtos / Zephyraffected * before 4.4.0

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.