CVE-2026-19185 | Zephyr Project up to 4.4.x I3C CCC i3c_handlers.c i3c_do_ccc out-of-bounds

October 5, 2026 Yanac

A vulnerability marked as very critical has been reported in Zephyr Project Zephyr up to 4.4.x. The affected element is the function i3c_do_ccc of the file drivers/i3c/i3c_handlers.c of the component I3C CCC Handler. Performing a manipulation results in out-of-bounds read.

This vulnerability is cataloged as CVE-2026-19185. The attack must be initiated from a local position. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More