What is CVE-2026-12634?
This CVE is a stack buffer overflow vulnerability in the NVS backend of Zephyr RTOS's settings subsystem where stored entries are read into fixed 74-byte buffers. Affected IoT devices are at risk of remote code execution and should immediately apply the relevant patch.
Azərbaycanca: Bu CVE Zephyr RTOS-un settings alt sistemindəki NVS backend-də stack buffer overflow zəifliyidir. Təsirə məruz qalan qurğular (xüsusilə IoT) uzaqdan kod icrası riski daşıyır; təcili olaraq müvafiq yamaq tətbiq edilməlidir.
Related CVEs
link basis: same weakness class CWE-119; shared vendor: Zephyr
FAQ2
Which component of which operating system is affected by the CVE-2026-12634 vulnerability?
This vulnerability affects the NVS backend in the settings subsystem of Zephyr RTOS.
What is the main risk for IoT devices related to CVE-2026-12634?
This vulnerability poses a risk of remote code execution.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.