{"id":"CVE-2026-123011","aliases":["EUVD-2026-117324","GHSA-hxxf-v8p5-g347"],"status":"published","title":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the...","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00177,"percentile":0.07326,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1284"],"published":"2026-11-05T04:24:55Z","modified":"2026-11-05T21:32:23Z","products":[{"vendor":"stmicroelectronics","product":"st-mems-android-linux-sensors-hal"}],"references":[{"url":"https://github.com/STMicroelectronics/st-mems-android-linux-sensors-hal/commit/7bdf334e2dcb942f1bc0695d18b97029bf5b2da5","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123011","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hxxf-v8p5-g347"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/123xxx/CVE-2026-123011.json","tags":["advisory"]},{"url":"https://github.com/STMicroelectronics/st-mems-android-linux-sensors-hal","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-123011","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","status":"published","published":"2026-11-05T04:24:55.366Z","modified":"2026-11-09T20:37:57.47Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-1284"],"updated_at":"2026-11-09T21:34:55.043741Z"}],"euvd":[{"id":"EUVD-2026-117324","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","status":"published","published":"2026-11-05T04:24:55Z","modified":"2026-11-09T20:37:57Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-09T22:18:21.971974Z"}],"ghsa":[{"id":"GHSA-hxxf-v8p5-g347","title":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the...","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","status":"published","published":"2026-11-05T06:34:36Z","modified":"2026-11-05T06:34:44Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-05T06:56:57.728857Z"}],"nvd":[{"id":"CVE-2026-123011","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","status":"published","published":"2026-11-05T05:18:36.587Z","modified":"2026-11-12T22:11:01.153Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-09T23:16:05.167043Z"}],"osv":[{"id":"CVE-2026-123011","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","status":"published","published":"2026-11-05T04:24:55.366Z","modified":"2026-11-11T07:19:56.291625425Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-10T10:57:25.458985Z"}]}}