CVE-2026-15419 — CP210x Driver Memory Corruption results in Arbitrary Code Execution

CVE-2026-15419

CP210x Driver Memory Corruption results in Arbitrary Code Execution PUBLISHED

Description (CNA)

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.

Affected (CNA)

Vendor / product	Versions
Silicon Labs / silabser.sys driver	affected 0 through 11.5.0

CWE

CWE-121

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.