CVE-2026-19669 | Zephyr Project up to 4.4.x Fuel Gauge Syscall fuel_gauge_syscall_handlers.c len out-of-bounds write

October 11, 2026 Yanac

A vulnerability marked as very critical has been reported in Zephyr Project Zephyr up to 4.4.x. Affected by this vulnerability is the function z_vrfy_fuel_gauge_get_props/z_vrfy_fuel_gauge_set_props of the file drivers/fuel_gauge/fuel_gauge_syscall_handlers.c of the component Fuel Gauge Syscall Handler. The manipulation of the argument len leads to out-of-bounds write.

This vulnerability is referenced as CVE-2026-19669. The attack can only be performed from a local environment. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More