---
id: "CVE-2026-123011"
kind: "vulnerability"
aliases: ["CVE-2026-123011"]
title: "STMicroelectronics MEMS sensors HAL: unchecked channel count can overflow"
severity: "medium"
cvss: 4.2
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["android", "linux", "package", "sensors-hal", "stmicroelectronics"]
not_affected_if: []
published_at: "2026-11-05T05:18:36+00:00"
first_seen_at: "2026-11-05T05:31:54+00:00"
updated_at: "2026-11-05T05:33:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123011", "first_seen_at": "2026-11-05T05:31:54+00:00"}]
exploit_sources: []
---

# STMicroelectronics MEMS sensors HAL: unchecked channel count can overflow

The st-mems-android-linux-sensors-hal library, before commit 7bdf334, does not check whether the allowed number of channels is exceeded. The sources do not say what an attacker can gain from this beyond the missing check.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for the st-mems-android-linux-sensors-hal source in your build and compare its commit against `7bdf334`

## Fix

- Move to commit `7bdf334` or later, per the linked patch

## Timeline

- 2026-11-05T05:31:54+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123011

## Documents

- [fix] Patch: github.com https://github.com/STMicroelectronics/st-mems-android-linux-sensors-hal/commit/7bdf334e2dcb942f1bc0695d18b97029bf5b2da5

## From the sources

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_