CVE-2026-19577 | Zephyr Project up to 4.4.x Neighbor Cache route_ipv6.c net_route_ipv6_packet idx out-of-bounds

October 11, 2026 Yanac

A vulnerability classified as critical was found in Zephyr Project Zephyr up to 4.4.x. This vulnerability affects the function net_route_ipv6_packet of the file subsys/net/ip/route_ipv6.c of the component Neighbor Cache. Such manipulation of the argument idx leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-19577. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More