CVE-2026-15418 — CP210x Memory Leakage

CVE-2026-15418

CP210x Memory Leakage PUBLISHED

Description (CNA)

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.

Affected (CNA)

Vendor / product	Versions
Silicon Labs / silabser.sys driver	affected 0 through 11.5.0

CWE

CWE-130

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.