CVE-2026-14256

MediumCVSS 4.7/10Last modified Aug 24, 2026

Description

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LenovoE16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoE14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoT14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoP16s Gen 4 (Type 21QR, 21QS) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoP16s Gen 4 (Type 21RX, 21RY) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoT16 Gen 4 (Type 21QN, 21QQ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoP14s Gen 6 (Type 21RV, 21RW) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoT14 Gen 6 (Type 21QJ, 21QK) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoP14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoE14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoE16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoX13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoT14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL13 2-in-1 Gen 6 (Type 21RD, 21RE) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL16 Gen 2 (Type 21RH, 21RJ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoL14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad< 31.21.60.1
LenovoT1g Gen 8 (Type 21TD, 21TE) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE)< 31.21.60.1
LenovoP1 Gen 8 (Type 21Q8, 21Q9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE)< 31.21.60.1
LenovoP16 Gen 3 (Type 21RQ, 21RR) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6)< 31.21.60.1
LenovoT16g Gen 3 (Type 21V5, 21V6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6)< 31.21.60.1
LenovoP16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16v Gen 3 (Type 21RS, 21RT)< 31.21.60.1
LenovoT14p Gen 3 (Type 21RU, 22A3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW)< 31.21.60.1
LenovoP16s Gen 4 (Type 21QV, 21QW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW)< 31.21.60.1
LenovoP14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW)< 31.21.60.1
LenovoL14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) JYT TrackPoint Firmware for Windows 11 (Version 24H2) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD)<= 41.71.2.15
LenovoL16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) JYT TrackPoint Firmware for Windows 11 (Version 24H2) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD)<= 41.71.2.15
LenovoL16 Gen 2 (Type 21RH, 21RJ) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21SE, 21SF), L16 Gen 2 (Type 21RH, 21RJ)<= 31.21.49.1
LenovoL14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21SE, 21SF), L16 Gen 2 (Type 21RH, 21RJ)<= 31.21.49.1
LenovoE14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0)< 31.21.60.1
LenovoL14p Gen 6 (Type 22B1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0)< 31.21.60.1
LenovoE16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0)< 31.21.60.1
LenovoL13 2-in-1 Gen 6 (Type 21RD, 21RE) Laptops (ThinkPad) ELAN TrackPoint Driver For Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21RB, 21RC), L13 Gen 6 2-in-1 (Type 21RD, 21RE)<= 31.21.49.1
LenovoL13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Driver For Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21RB, 21RC), L13 Gen 6 2-in-1 (Type 21RD, 21RE)<= 31.21.49.1
LenovoL14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD)<= 31.21.49.1
LenovoL16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD)<= 31.21.49.1
LenovoE14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU)< 31.21.60.1
LenovoE16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU)< 31.21.60.1
LenovoX13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X13 Gen 6 (Type 21RM, 21RN)< 31.21.60.1
LenovoT14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21TB, 21TC)< 31.21.60.1
LenovoT14 Gen 6 (Type 21QC, 21QD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4< 31.21.60.1
LenovoT16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4< 31.21.60.1
LenovoT14 Gen 6 (Type 21QG, 21QH) Laptops (ThinkPad ) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4< 31.21.60.1
LenovoL16 Gen 2 (Type 21SA, 21SB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S6, 21S7), L16 Gen 2 (Type 21SA, 21SB)<= ELA TrackPoint Device 31.21.49.1 / Elan TrackPoint Component 31.21.0.6 / ETD HSA Device 31.21.0.5
LenovoL14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S6, 21S7), L16 Gen 2 (Type 21SA, 21SB)<= ELA TrackPoint Device 31.21.49.1 / Elan TrackPoint Component 31.21.0.6 / ETD HSA Device 31.21.0.5
LenovoS2 2 in 1 Gen 10 (Type 21RA) China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8)<= 31.21.49.1
LenovoS2 Gen 10 Type 21R9 China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8)<= 31.21.49.1
LenovoL13 Gen 6 (Type 21R5, 21R6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8)<= 31.21.49.1

References

Timeline

Published
Aug 13, 2026
Last modified
Aug 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-142577.5brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results wCVE-2026-142586.5A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containiCVE-2026-142594.3Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to enforce board creation permissions wheCVE-2026-14268.8The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 vCVE-2026-142619.1A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ CVE-2026-142628.8The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Bypass to Privilege EscCVE-2026-142658.8Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might aCVE-2026-142667.87-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to executeCVE-2026-142699.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerCVE-2026-14278.8Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inCVE-2026-142708.8The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File CVE-2026-142736.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could all