CVE-2026-109588
8.8 HIGHpublic exploit availablePublished 2026-10-16 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-125, CWE-197, CWE-787
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102225
- UNSCOREDCVE-2026-102757PoC
- CRITICALCVE-2026-103513PoC
- HIGHCVE-2026-61714PoC
- UNSCOREDCVE-2026-63272
- UNSCOREDCVE-2026-63274
- UNSCOREDCVE-2026-76151
- MEDIUMCVE-2026-78628
Related by shared AI tags and CWE weakness class. Browse the full archive.