{"id":"CVE-2026-123011","kind":"vulnerability","aliases":["CVE-2026-123011"],"related":[],"title":"STMicroelectronics MEMS sensors HAL: unchecked channel count can overflow","description":"STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.","summary":"The st-mems-android-linux-sensors-hal library, before commit 7bdf334, does not check whether the allowed number of channels is exceeded. The sources do not say what an attacker can gain from this beyond the missing check.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","linux","package","sensors-hal","stmicroelectronics"],"not_affected_if":[],"how_to_check":"- Look for the st-mems-android-linux-sensors-hal source in your build and compare its commit against `7bdf334`","fix":"- Move to commit `7bdf334` or later, per the linked patch","status":"open","published_at":"2026-11-05T05:18:36+00:00","first_seen_at":"2026-11-05T05:31:54+00:00","triaged_at":"2026-11-05T05:33:44+00:00","updated_at":"2026-11-05T05:33:44+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-05T05:33:44Z","model":"claude-haiku-5-5","output":{"fix":"- Move to commit `7bdf334` or later, per the linked patch\n- unknown","reach":"unknown","title":"STMicroelectronics MEMS sensors HAL: unchecked channel count can overflow","impact":"medium","summary":"The st-mems-android-linux-sensors-hal library, before commit 7bdf334, does not check whether the allowed number of channels is exceeded. The sources do not say what an attacker can gain from this beyond the missing check.","audience":"developers","category":"package","nicknames":[],"who_cares":["android","linux","sensors-hal","stmicroelectronics"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown","analyst_note":"","how_to_check":"- Look for the st-mems-android-linux-sensors-hal source in your build and compare its commit against `7bdf334`\n- unknown","plain_action":"","needs_analyst":false,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000613,"input_tokens":4193,"output_tokens":387,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123011':12A,15A '-2026':11A,14A '7bdf334':34B,71C 'allow':40B,77C 'android':16B,27B,66C 'attack':53B 'beyond':58B 'channel':6A,43B,80C 'check':37B,61B,74C 'commit':33B 'count':7A 'cve':10A,13A 'exceed':45B,82C 'gain':55B 'hal':4A,21B,30B,69C 'librari':31B 'linux':17B,28B,67C 'mem':2A,26B,65C 'miss':60B 'number':41B,78C 'overflow':9A 'packag':18B 'say':50B 'sensor':3A,20B,29B,68C 'sensors-h':19B 'sourc':47B 'st':25B,64C 'st-mems-android-linux-sensors-h':24B,63C 'stmicroelectron':1A,22B,62C 'uncheck':5A 'whether':38B,75C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","linux","medium","package","sensorshal","stmicroelectronics"],"campaign_type":null,"first_public_at":"2026-11-05T05:18:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cvss_by":"cve@mitre.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123011","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123011","severity":null,"published_at":"2026-11-05T05:18:36+00:00","modified_at":"2026-11-05T05:18:36+00:00","first_seen_at":"2026-11-05T05:31:54+00:00","fetched_at":"2026-11-05T05:31:54+00:00","note":null}],"documents":[{"id":73453,"url":"https://github.com/STMicroelectronics/st-mems-android-linux-sensors-hal/commit/7bdf334e2dcb942f1bc0695d18b97029bf5b2da5","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}