VYPR

COINES_SDK

by Bosch Sensortec

CVEs (2)

  • CVE-2026-42807HigSep 10, 2026
    risk 0.52cvss 8.0epss 0.00

    A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) or potentially execute arbitrary code. The bridge decoder…

  • CVE-2026-42808MedSep 10, 2026
    risk 0.44cvss 6.8epss 0.00

    An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries of the caller-provided destination buffer. Internally, the stream processing mechanism…