CVE-2026-43051

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The wacom intuos bt irq() function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read—a condition where the system reads data past the end of the intended buffer—when copying data into the wacom structure. Specifically, report 0x03 requires at least 22 bytes to safely read processed data and battery status, while report 0x04 requires 32 bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.