CVE-2026-25278High· 7.8▾ TwilightMemory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.09%
Last analysed / modified upstream
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
lemans_au_lgit_firmwarelemansau_firmwareqam8255p_firmwareqam8295p_firmwareqam8620p_firmwareqamsrv1h_firmwareqamsrv1m_firmwareqca6574au_firmwareqca6595_firmwareqca6595au_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwareqca6797aq_firmwareqca8695au_firmwaresa6155p_firmwaresa7255p_firmwaresa7775p_firmwaresa8155p_firmwaresa8195p_firmwaresa8255p_firmwaresa8295p_firmwaresa8540p_firmwaresa8620p_firmwaresa8770p_firmwaresa9000p_firmwaresrv1h_firmwaresrv1l_firmwaresrv1m_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-24073High· 7.8Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
CVE-2026-24081High· 7.4Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-24075High· 7.8Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074High· 7.8Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-25261Medium· 6.7Memory corruption while processing rear sensor IOCTL calls.
CVE-2025-59607High· 7.8Memory Corruption when copying large input data exceeds normal allocation limits.