CVE-2026-6232: Semtech LR1110 Transceiver, грешка в паметта

Описание

Оригинално описание

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer. Exploitation requires physical access to the device and logical access to the SPI bus.

Засегнати продукти

• Semtech LR1110 Transceiver: преди 0x0403; A1_0303
• Semtech LR1110 Modem-e: преди 2.1.1
• Semtech LR1120 Transceiver: преди 0x0203; A2_0101
• Semtech LR1121 Transceiver: преди 0x0105; A3_0101
• Semtech LR1121 Modem-e: преди 2.1.1

Вид слабост

• CWE-787 Out-of-bounds Write

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-6232
• https://nvd.nist.gov/vuln/detail/CVE-2026-6232
• https://www.semtech.com/company/security/security-bulletins/sem-psa-2026-002-lr11xx-security-advisory