CVE-2026-10684 | ZephyrProject Zephyr up to 4.4.0 Coredump Shell coredump_shell.c print_coredump_hdr tgt_code out-of-bounds

July 29, 2026 Yanac

A vulnerability marked as critical has been reported in ZephyrProject Zephyr up to 4.4.0. Affected by this vulnerability is the function print_coredump_hdr of the file subsys/debug/coredump/coredump_shell.c of the component Coredump Shell. This manipulation of the argument tgt_code causes out-of-bounds read.

This vulnerability is handled as CVE-2026-10684. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More