CVE-2026-115680

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115680

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...

CVE-2026-115680

Arm Keil MDK-Middleware versions 8.0.0-8.3.0 are susceptible to a vulnerability that may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission . The underlying cause involves an out-of-bounds read (CWE-125). While the CVSS 3.1 score is 6.5 (MEDIUM) , the technical details regardi...

EUVD-2026-109965

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...

CVE-2026-115680

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 is vulnerable to out-of-bounds reads and writes specifically within the FTP Server RX Buffer . The underlying cause is identified as a Signed to Unsigned Conversion Error (CWE-195). While the technical impact is noted as partial with potential for low integrity and a...

EUVD-2026-109921

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware versions 8.0.0-8.3.0 are susceptible to a pre-authentication out-of-bounds read vulnerability during SNMP processing . The issue is categorized under CWE-195 (Signed to Unsigned Conversion Error). While the vulnerability is accessible over the network without authenticatio...

EUVD-2026-109919

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-116487

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

CVE-2026-116488

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...

CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...

CVE-2026-116488

The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions before 2.13.0 is vulnerable to a heap buffer overflow in the host audio, video, and CDC class drivers. The root cause is the improper trust of device-supplied bNumEndpoints and bLength values, which allows a malicious USB dev...

EUVD-2026-109815

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...