Buffer Overflow Vulnerability in Bosch Sensortec COINES_SDK
CVE-2026-42808

6.8MEDIUM

Key Information:

Vendor

Bosch Sensortec

Status
Coines Sdk
Vendor
CVE Published:
10 September 2026

What is CVE-2026-42808?

A vulnerability in Bosch Sensortec's COINES_SDK allows for buffer overflow due to improper validation of memory boundaries in a host streaming API function. An attacker with access to a vulnerable hardware board via USB or BLE may exploit this flaw by sending excessive sensor sample data. As a result, it may lead to Denial of Service (DoS) or even arbitrary code execution on the host system, posing significant security risks.

Affected Version(s)

COINES_SDK 2.0 <= 2.11

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-2236...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.