Threats Tagged 'cve-2026-19571'

CVE-2026-19571 is a race condition vulnerability in the Zephyr project's ITE IT8xxx2 SHI host-command backend. It occurs because the driver copies an 8-byte host-command request header into a shared buffer before validating the protocol version and packet length, allowing a timing race that can lead to out-of-bounds reads and memory disclosure. Exploitation requires control over the SPI bus and winning a timing race. The vulnerability affects Zephyr versions from 3.3.0 up to but not including 4.5.0. The flaw can cause disclosure of embedded controller memory or cause faults due to out-of-bounds reads. A fix has been implemented to parse and validate the header before copying and to restrict interrupt handling to appropriate states, though a bounded residual race remains.