Skip to content
Sign in
5.2 Medium

CVE-2026-96402 A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration,…

Description

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

Affected products and versions

Product Affected versions Fixed in
Eclipse ThreadX - USBX 6.5 earliest → 6.5.1.202602 6.5.2.202603

Other CVEs of Eclipse ThreadX - USBX

The 3 CVEs of Eclipse ThreadX - USBX →
CVE-2026-96582 A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow 4.9 Medium CVE-2025-55095 The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device 4.2 Medium
Track this CVE