CVE-2026-17051 | ZephyrProject Zephyr up to 4.4.1 IPM Driver drivers/ipm/ipm_sedi.c ipm_event_dispose out-of-bounds write

September 21, 2026 Yanac

A vulnerability described as critical has been identified in ZephyrProject Zephyr up to 4.4.1. This affects the function ipm_event_dispose of the file drivers/ipm/ipm_sedi.c of the component IPM Driver. The manipulation results in out-of-bounds write.

This vulnerability was named CVE-2026-17051. The attack needs to be approached locally. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More