Confidentiality Vulnerability in UMP Stream Responder Library by Zephyr Project

CVE-2026-13343

What is CVE-2026-13343?

The UMP Stream responder library in Zephyr's implementation is susceptible to a confidentiality vulnerability due to uninitialized local variables. When processing UMP Stream messages, specific response functions were found to only initialize part of the response data structure, resulting in the transmission of potentially sensitive information from the stack memory to an attacker. This leak occurs through responding to malicious endpoint discovery requests, allowing an attacker to repeatedly disclose 8 bytes of uninitialized memory. The vulnerability was addressed by ensuring that all fields in the response structures are properly zero-initialized, thus preventing any leakage of stale memory content.

References