CVE-2026-96402
USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.
| CWE | CWE-125 |
| Vendor | eclipse foundation |
| Product | eclipse threadx - usbx |
| Published | Oct 20, 2026 |
| Last Updated | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse threadx - usbx
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx - usbx are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse ThreadX - USBX
0 ≤ 6.5.1.202602
References
Credits
🔍 Microsvuln