CVE Catalog

CVE-2026-14256

MediumCVSS 4.7
Published: Updated: Translated: NVD NIST

Summary

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

Risk Assessment

The risk is the possibility of a system crash caused by a local user, potentially leading to downtime and potential data loss.

Recommendation

It is recommended to apply the ELAN TrackPoint driver update provided by the vendor, which fixes this vulnerability.

Original NVD description (English source)

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS