CVE-2026-89142 is a vulnerability in the Wi-Fi NPU firmware involving a possible out-of-bounds write caused by an incorrect bounds check. Exploitation requires local user privileges but no user interaction. The flaw can lead to a denial of service condition.