Out-of-Bounds Write Vulnerability in ITE it51xxx I2C Driver by ITE

CVE-2026-14986

What is CVE-2026-14986?

The ITE it51xxx I2C driver is susceptible to an out-of-bounds write vulnerability when functioning as an I2C target in buffer mode. This issue occurs within the FIFO interrupt handler, where incoming write data can overflow the designated target input buffer due to improper bounds checks. Specifically, if an I2C host transmits more data than the buffer can accommodate, the excess data writes to adjacent memory spaces, including output buffers and device data, potentially leading to crashes or exploitation through malicious input. The vulnerability can be triggered by a misconfigured or compromised I2C master device on the same bus, requiring no specific software privileges on the target system. The recent fix includes pre-write bounds checks to mitigate these risks, enhancing the driver’s reliability in critical applications.

References