CVE-2026-21374

CVE-2026-21374 is a memory corruption vulnerability affecting auxiliary sensor input/output control command processing due to insufficient buffer size validation. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, requiring local access and low privileges to exploit, while delivering high impact across confidentiality, integrity, and availability. The attack is relatively straightforward to execute with no user interaction needed once local access is obtained. Exploitation appears minimal at present, as the vulnerability is not tracked in the Known Exploited Vulnerabilities catalog and remains inactive on threat lists, suggesting limited real-world weaponization or community attention. The EPSS score of 0.000060000 indicates very low probability of exploitation in the wild currently, though organizations should prioritize patching given the high CVSS rating and the local attack vector's feasibility in compromised or insider threat scenarios.