Out-of-Bounds Write Vulnerability in ADXL345 Sensor Driver by Vendor Zephyr Project

CVE-2026-79978

What is CVE-2026-79978?

The ADXL345 sensor driver has a vulnerability that allows for out-of-bounds writes due to improper handling of FIFO data reporting. When the allocated buffer is smaller than the necessary data size, the driver can write beyond the allocated memory, leading to potential corruption of neighboring buffers. This issue can produce silent data corruption or application crashes, especially under specific conditions such as buffer pool starvation, which may occur with concurrent workloads. The vulnerability arises from the way FIFO length is processed and reported, along with flaws in memory allocation practices. Users and developers should apply the recommended patches and monitor their systems for any unusual behavior caused by this defect.

References