CVE-2026-14368 | Zephyr Project up to 4.4.1 LwM2M JSON content formatter lwm2m_rw_json.c get_string out-of-bounds write

A vulnerability identified as problematic has been detected in Zephyr Project Zephyr up to 4.4.1. Impacted is the function get_string of the file subsys/net/lib/lwm2m/lwm2m_rw_json.c of the component LwM2M JSON content formatter. Performing a manipulation results in out-of-bounds write.

This vulnerability was named CVE-2026-14368. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More