Memory Corruption Flaw in NXP GAU ADC Driver Could Lead to Privilege Escalation

CVE-2026-19184

What is CVE-2026-19184?

The NXP GAU ADC driver contains a vulnerability that allows for potential memory corruption due to improper validation of a caller-supplied buffer size. This flaw occurs when the driver stores a byte count in a way that does not account for the size of the data being written, which leads to an overflow condition. An attacker with access to user-mode threads can exploit this through a crafted buffer, causing the driver to write beyond the intended boundaries. This can ultimately lead to kernel memory corruption, crashes, or privilege escalation, as the vulnerability allows control over the destination and length of the memory write. Implementing a proper validation mechanism is crucial to mitigate such risks.

References