Memory Corruption in STM32WBA IEEE 802.15.4 Driver by STMicroelectronics
CVE-2026-75085

4.2MEDIUM

Key Information:

Vendor

Zephyrproject

Status
Zephyr
Vendor
CVE Published:
14 October 2026

What is CVE-2026-75085?

The STM32WBA IEEE 802.15.4 driver has a vulnerability that allows attackers within radio range to manipulate packet lengths, potentially leading to memory corruption. The driver fails to validate the lengths of received frames before processing, allowing for an underflow condition that can read data beyond allocated memory boundaries. This can expose sensitive information stored in adjacent memory or lead to oversized packet allocations, posing a significant security risk to devices using this driver.

Affected Version(s)

zephyr 4.3.0 <= 4.4.2

References

https://github.com/zephyrproject-rtos/zephyr/commit/46f8a...
patch
https://github.com/zephyrproject-rtos/zephyr/security/adv...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.