Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-63916

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: wacom: Fix OOB write in wacom_hid_set_device_mode()<br /> <br /> wacom_hid_set_device_mode() currently assumes that the HID_DG_INPUTMODE<br /> usage is always located in the first field (field[0]) of the feature report.<br /> However, a device can specify HID_DG_INPUTMODE in a different field.<br /> <br /> If HID_DG_INPUTMODE is in a field other than the first one and the first<br /> field has a report_count smaller than the usage_index of HID_DG_INPUTMODE,<br /> this leads to an out-of-bounds write to r-&gt;field[0]-&gt;value.<br /> <br /> Fix this by storing the field index of HID_DG_INPUTMODE in &amp;#39;struct<br /> hid_data&amp;#39; during feature mapping. In wacom_hid_set_device_mode(), use<br /> this stored field index to access the correct field and add bounds<br /> checks to ensure both the field index and the value index are within<br /> valid ranges before writing.