Buffer Overflow Vulnerability in CC1200 Sub-GHz IEEE 802.15.4 Driver by Zephyr Project

CVE-2026-75084

What is CVE-2026-75084?

The CC1200 sub-GHz IEEE 802.15.4 driver is susceptible to a buffer overflow due to improper validation of PHY packet lengths. An unauthenticated attacker within radio range can exploit this vulnerability by sending a malicious frame with a length byte exceeding the maximum allowed limit. The driver does not adequately bound the packet length, which can lead to network-buffer-pool corruption and crashes. This exploit requires no user authentication or interaction, significantly increasing the attack surface. Affected configurations are those that enable the CONFIG_IEEE802154_CC1200 feature with an attached CC1200 radio, making it essential for users to apply the recommended patches to secure their systems.

References