CVE-2026-116776 USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize in USB Test/src/driveinfo.cpp trusts DISKGEOMETRY.BytesPerSector returned by IOCTLDISKGETDRIVEGEOMETRY without checking wheth...

CVE-2026-116776

The USB Test Windows CLI utility is vulnerable to a heap-based buffer overflow and a divide-by-zero denial of service (DoS) in versions prior to 1.1.5 . The flaw exists in the getSectorSize() function within USB Test/src/driveinfo.cpp, which fails to verify the success or enforce size bounds on D...