Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2026-96402

USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Eclipse ThreadX - USBX

Default version status: unaffected

  • 0 to ≤ 6.5.1.202602affected
  • 6.5.2.202603unaffected

References