CVE-2026-6232

Description

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer. Exploitation requires physical access to the device and logical access to the SPI bus.

Traduire en français

Produits concernés

• Semtech LR1110 Transceiver
• Semtech LR1110 Modem-e
• Semtech LR1120 Transceiver
• Semtech LR1121 Transceiver
• Semtech LR1121 Modem-e

Scores CVSS

Faiblesses (CWE)

• CWE-787

Références

• https://www.semtech.com/company/security/security-bulletins/sem-psa-2026-002-lr11xx-security-advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories