What is CVE-2026-11809?
A vulnerability in the UpdateHub OTA client's 'z_impl_updatehub_probe()' function involves an out-of-bounds or uninitialized-memory read in a heap buffer. This occurs when the probe response from the server is copied to a metadata_copy buffer that is not properly NUL-terminated.
Azərbaycanca: UpdateHub OTA müştərisində 'z_impl_updatehub_probe()' funksiyasında heap buffer-da yaddaş oxuma zəifliyi aşkarlanıb. Bu, serverdən gələn cavabın düzgün NUL sonlandırılmayan metadata_copy bufferinə kopyalanması nəticəsində yaranan out-of-bounds/uninitialized-memory read problemidir.
Related CVEs
link basis: same weakness class CWE-125
FAQ2
In which function was CVE-2026-11809 discovered in the UpdateHub OTA client?
The vulnerability was discovered in the `z_impl_updatehub_probe()` function.
What is the root cause of the memory read issue in CVE-2026-11809?
The out-of-bounds/uninitialized-memory read occurs because the server's response is copied to a metadata_copy buffer that is not properly NUL-terminated.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.