Channel Limit Bypass in STMicroelectronics Android Linux Sensors HAL
CVE-2026-123011

4.2MEDIUM

Key Information:

Vendor
CVE Published:
5 November 2026

What is CVE-2026-123011?

The STMicroelectronics Android Linux Sensors HAL version prior to 7bdf334 is susceptible to a vulnerability that allows attackers to bypass channel limits. This issue arises due to the lack of validation on the number of channels, which could lead to unexpected behavior or unauthorized access to device resources. Developers should ensure that their implementations restrict channel usage according to specified limits to mitigate potential risks.

Affected Version(s)

st-mems-android-linux-sensors-hal 0 < 7bdf334e2dcb942f1bc0695d18b97029bf5b2da5

References

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.