CVE-2026-13343 | Zephyr Project up to 4.4.1 UMP Stream Responder ump_stream_responder.c make_endpoint_info uninitialized resource

August 24, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Zephyr Project Zephyr up to 4.4.1. This issue affects the function make_endpoint_info of the file lib/midi2/ump_stream_responder.c of the component UMP Stream Responder. This manipulation causes uninitialized resource.

This vulnerability is tracked as CVE-2026-13343. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More