---
id: CVE-2026-123011
title: >-
  STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not
  check whether the allowed number of channels is exceeded.
summary: >-
  STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not
  check whether the allowed number of channels is exceeded.
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-1284
vendor: STMicroelectronics
product: st-mems-android-linux-sensors-hal
affected:
  - st-mems-android-linux-sensors-hal < 7bdf334e2dcb942f1bc0695d18b97029bf5b2da5
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T04:24:55.366Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-123011'
references:
  - url: >-
      https://github.com/STMicroelectronics/st-mems-android-linux-sensors-hal/commit/7bdf334e2dcb942f1bc0695d18b97029bf5b2da5
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.732Z'
epss: 0.00177
epssPercentile: 0.07288
---

## Overview

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.

## Affected

- `st-mems-android-linux-sensors-hal < 7bdf334e2dcb942f1bc0695d18b97029bf5b2da5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.