https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:49:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43051 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq</p> <p>The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when copying data into the wacom structure.</p> <p>Specifically, report 0x03 requires at least 22 bytes to safely read the processed data and battery status, while report 0x04 (which falls through to 0x03) requires 32 bytes.</p> <p>Add explicit length checks for these report IDs and log a warning if a short report is received.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq</p> <p>The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when copying data into the wacom structure.</p> <p>Specifically, report 0x03 requires at least 22 bytes to safely read the processed data and battery status, while report 0x04 (which falls through to 0x03) requires 32 bytes.</p> <p>Add explicit length checks for these report IDs and log a warning if a short report is received.</p> https://vulnerability.circl.lu/vuln/cve-2026-43051