CVE-2026-43051 is a high-severity vulnerability in the Linux kernel's wacom driver. It involves an out-of-bounds read in the wacom_intuos_bt_irq() function when processing Bluetooth HID reports. The flaw occurs because the function does not properly check the length of certain reports (0x03 and 0x04) before reading data, which can lead to reading beyond the allocated buffer. This issue has been fixed by adding explicit length checks and logging warnings for short reports.