CVE-2026-19737 | ZephyrProject Zephyr up to 4.4.x I2S Driver drivers/i2s/i2s_esp32.c i2s_esp32_trigger_check dir null pointer dereference

October 11, 2026 Yanac

A vulnerability described as problematic has been identified in ZephyrProject Zephyr up to 4.4.x. Affected by this issue is the function i2s_esp32_trigger_check of the file drivers/i2s/i2s_esp32.c of the component I2S Driver. The manipulation of the argument dir results in null pointer dereference.

This vulnerability is identified as CVE-2026-19737. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More