CVE-2026-116488

The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions before 2.13.0 is vulnerable to a heap buffer overflow in the host audio, video, and CDC class drivers. The root cause is the improper trust of device-supplied bNumEndpoints and bLength values, which allows a malicious USB dev...

EUVD-2026-109815

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...

EUVD-2026-109814

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

CVE-2026-116487

The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions prior to 2.13.0 is vulnerable to an out-of-bounds read in the USB_DeviceCdcRndisSetCommand() function. The vulnerability occurs because the software trusts a host-supplied informationBufferOffset. A malicious USB host can exp...