CVE-2026-10644 | zephyrproject zephyr up to 4.4.x uart_mchp_sercom_g1.c uart_rx_enable out-of-bounds write (GHSA-xv2x-56j7-6wc3)

June 28, 2026 Yanac

A vulnerability classified as critical has been found in zephyrproject zephyr up to 4.4.x. This issue affects the function uart_rx_enable of the file drivers/serial/uart_mchp_sercom_g1.c. Performing a manipulation results in out-of-bounds write.

This vulnerability is cataloged as CVE-2026-10644. The attack must originate from the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More