Veille CVE

Octobre 2026

1 CVE

  1. CVE-2026-6232 5.2 Moyenne

    Semtech LR1110 Transceiver · Semtech LR1110 Modem-e · Semtech LR1120 Transceiver · Semtech LR1121 Transceiver

    An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer. Exploitation requires physical access to the device and logical access to the SPI bus.