CVE-2026-13212 | Zephyr Project up to 4.4.1 virtio driver virtio_common.c virtio_isr out-of-bounds

August 24, 2026 Yanac

A vulnerability classified as very critical was found in Zephyr Project Zephyr up to 4.4.1. This vulnerability affects the function virtio_isr of the file drivers/virtio/virtio_common.c of the component virtio driver. The manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2026-13212. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More