CVE-2026-64271

A flaw was found in the Linux kernel's touchwin input driver. A malicious, malfunctioning, or counterfeit Touchwindow peripheral can exploit an unbounded heap out-of-bounds write vulnerability by streaming specific non-zero bytes. This prevents the packet index from resetting, allowing the peripheral to write arbitrary data beyond the intended buffer. This could lead to arbitrary code execution, enabling an attacker to take control of the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.