Vulnerabilities

TI-2026-10744 CVE-2026-12519

Out-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsing

LOW 22

The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/modem/vendor_standalone/wncm14a2a.c).

CVSS 3.1MEDIUM 5.0 Adjacent network No auth No interaction EPSS 0.00235 Published 2026-08-17 Fixed in 4.3.2, 4.4.2 CWE-787

TI-2026-08562 CVE-2026-9771

LOW 39

The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-08-17 Fixed in 4.3.2, 4.4.2 CWE-822

TI-2026-10820 CVE-2026-12629

LOW 21

The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive error interrupts.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0023 Published 2026-08-17 Fixed in 4.3.2, 4.4.2 CWE-835