# CVE-2026-42808

## Summary

- **CVE ID:** CVE-2026-42808
- **Severity:** MEDIUM
- **CVSS Score:** 6.8 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-120
- **Published:** Sep 10, 2026
- **Last Modified:** Sep 10, 2026

## Description

An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. 

The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries of the caller-provided destination buffer.

Internally, the stream processing mechanism in {{comm_intf_process_stream_response()}} discards the requested {{number_of_samples}} argument and copies the entirety of the streaming ring buffer's accumulated data into {{coines_stream_rsp_buf}}.

Subsequently, {{coines_read_stream_sensor_data()}} unconditionally executes a {{memcpy}} of the ring buffer size into the caller-provided buffer without verifying if the destination memory allocation is large enough.

A malicious or compromised hardware board connected via USB or BLE can exploit this by streaming a high volume of sensor samples, causing a heap or stack-based buffer overflow on the host desktop environment.

This can result in a Denial of Service (DoS) or potential arbitrary code execution on the host machine.

## Affected Products

- Bosch Sensortec — COINES_SDK (2.0)

## References

- [CNA](https://psirt.bosch.com/security-advisories/BOSCH-SA-223618.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.19%
- **EPSS Percentile:** 8.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._