Threats Tagged 'cve-2026-19736'
View all threats tagged with 'cve-2026-19736'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19736'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-19736 is a vulnerability in the NXP MCUX TRNG entropy driver used in Zephyr OS on certain i.MX RT5xx and RT6xx devices. It causes a buffer overflow when requesting entropy with a length not multiple of four bytes, leading to up to 127 bytes of memory corruption beyond the caller's buffer. This can affect kernel memory or adjacent partitions due to lack of MMU on Cortex-M33 targets. The overflow is deterministic in offset but the data written is uncontrolled TRNG output, potentially causing crashes, state corruption, or privilege escalation. A patch is available that fixes the issue by ensuring only word-aligned requests are passed to the SDK. Join the discussion | CVE Database V5 | 10/11/2026, 17:14:58 UTC Added: 10/11/2026, 17:34:03 UTC |
Showing 1 to 1 of 1 result