Memory Corruption Vulnerability in NXP KW41Z IEEE 802.15.4 Driver

CVE-2026-75083

What is CVE-2026-75083?

The NXP KW41Z IEEE 802.15.4 driver contains a vulnerability related to how it calculates the payload size in its receive path. An incorrect calculation can lead to an underflow, allowing attackers to send malformed packets that could overflow allocated memory buffers. This overflow can result in memory corruption, potentially causing system crashes or corruption of legitimate data. The vulnerability arises from the handling of frame lengths obtained from unauthenticated frames, which may allow an attacker within radio range to exploit the flaw. A fix has been implemented to ensure that size calculations reject invalid lengths and verify available buffer space before writing data.

References