Nordic Semiconductor ASA nRF Connect SDK

• CVE-2026-14297 High 8.7 The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixed 20-byte BSS buffer. 0.2%