CVE-2026-11810

Name of the Vulnerable Software and Affected Versions UpdateHub (affected versions not specified)

Description The UpdateHub firmware-update agent contains a flaw in its probe handler z impl updatehub probe() within subsys/mgmt/updatehub/updatehub.c. The handler parses JSON metadata from an update server into a two-level nested-array struct but only validates the outer array length. It subsequently calls strlen() on the sha256sum variable of the first element of the second outer object array without verifying that the inner array is non-empty. A malicious update server or a man-in-the-middle attacker (if DTLS is disabled) can provide a response with an empty second outer object array, causing a NULL pointer dereference. This results in a fatal CPU fault that halts or resets the device, leading to a remotely triggerable denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.