NXP MCUXpresso SDK USB Middleware Before 2.13.0 RNDIS Out-of-Bounds Read

NXP MCUXpresso SDK USB middleware versions before 2.13.0 contain an out-of-bounds read in USBDeviceCdcRndisSetCommand that can disclose device memory through crafted RNDIS SET messages...

CVE-2026-116487

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

CVE-2026-116487 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

CVE-2026-116487 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

EUVD-2026-109814

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...

CVE-2026-116487

The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions prior to 2.13.0 is vulnerable to an out-of-bounds read in the USB_DeviceCdcRndisSetCommand() function. The vulnerability occurs because the software trusts a host-supplied informationBufferOffset. A malicious USB host can exp...