Threats Tagged 'cve-2026-19935'
View all threats tagged with 'cve-2026-19935'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19935'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-19935 is a use-after-free vulnerability in the Zephyr Bluetooth LE host's handling of L2CAP connection-oriented channel (CoC) data when using dynamic PSMs. The issue arises because the system workqueue holds a pending work item referencing a channel object that may be freed or reused during channel teardown, leading to memory corruption or crashes. The vulnerability affects Zephyr versions from 2.0.0 up to and including 4.4.2. The flaw can be triggered remotely by an unauthenticated peer sending specific L2CAP frames. A fix has been implemented that routes the RX work to the Bluetooth workqueue and cancels the pending work item during teardown, preventing use-after-free conditions. Join the discussion | CVE Database V5 | 10/11/2026, 17:15:03 UTC Added: 10/11/2026, 17:34:05 UTC |
Showing 1 to 1 of 1 result