CVE-2026-21376

CVE-2026-21376 is a memory corruption vulnerability in camera sensor drivers that occurs when output buffers are accessed during IOCTL processing without proper size validation. The flaw allows attackers to trigger buffer overflows that could compromise system integrity and confidentiality. The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector requiring low complexity and user-level privileges, but no user interaction. Successful exploitation grants attackers the ability to achieve confidentiality, integrity, and availability impacts on affected systems. Based on current indicators, CVE-2026-21376 has not been added to CISA's Known Exploited Vulnerabilities catalog and shows no evidence of active exploitation in the wild. The EPSS score of 0.00006 indicates minimal likelihood of near-term exploitation despite the moderate FAUCET Risk Score of 49.0, suggesting this remains an emerging threat requiring proactive patching rather than urgent emergency remediation.