A vulnerability categorized as critical has been discovered in Morse Micro HaLowLink up to 2.11.11. Affected by this vulnerability is the function
morse_vendor_find_vendor_ie in the library morse.ko. Executing a manipulation can lead to out-of-bounds read.
This vulnerability is handled as CVE-2026-7764. The attack can only be done within the local network. There is not any exploit available.
It is advisable to upgrade the affected component.