CVE-2026-96402

Vulnerability Description

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

Related Weaknesses (CWE)

CWE-125

References

https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-2ch9-p8xv-fwp6

FAQ

What is CVE-2026-96402?

CVE-2026-96402 is a documented vulnerability. A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

How severe is CVE-2026-96402?

CVSS scoring is not yet available for CVE-2026-96402. Check NVD for updates.

Is there a patch for CVE-2026-96402?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.