{"id":"CVE-2026-6232","published":"2026-10-12T18:17:23.333","lastModified":"2026-10-16T19:56:15.773","description":"An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer. Exploitation requires physical access to the device and logical access to the SPI bus.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://www.semtech.com/company/security/security-bulletins/sem-psa-2026-002-lr11xx-security-advisory","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}