CVE-2026-18414 | ZephyrProject Zephyr up to 4.4.1 ADC Driver drivers/adc/adc_max32.c start_read buffer_size memory corruption

September 28, 2026 Yanac

A vulnerability identified as very critical has been detected in ZephyrProject Zephyr up to 4.4.1. The affected element is the function start_read of the file drivers/adc/adc_max32.c of the component ADC Driver. This manipulation of the argument buffer_size causes memory corruption.

This vulnerability is registered as CVE-2026-18414. The attack needs to be launched locally. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More