CVE-2026-18415 | Zephyr Project up to 4.4.1 ieee802154 ieee802154.c ieee802154_send data/len out-of-bounds write

September 28, 2026 Yanac

A vulnerability marked as problematic has been reported in Zephyr Project Zephyr up to 4.4.1. This affects the function ieee802154_send of the file subsys/net/l2/ieee802154/ieee802154.c of the component ieee802154. Performing a manipulation of the argument data/len results in out-of-bounds write.

This vulnerability is reported as CVE-2026-18415. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More