Bosch Sensortec
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| COINES_SDK | 2 | – | Sep 10, 2026 |
| BHI360_SensorAPI (C-Library) | 1 | – | Sep 10, 2026 |
| BHI385 SensorAPI (C Library) | 1 | – | Sep 10, 2026 |
| BME690 SensorAPI (C) | 1 | – | Sep 10, 2026 |
Exploited and recent CVEs
- CVE-2026-42808 An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries of the caller 0.3%
- CVE-2026-42807 A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) o 0.3%
- CVE-2026-42806 An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data parsing logic in read_all_field_data (bme69x 0.2%
- CVE-2026-42805 A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_debug_message (located in bhi385_parse.c). 0.2%
- CVE-2026-42804 A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO 0.3%