49 matches found
NXP MCUXpresso SDK USB Middleware Before 2.13.0 Heap Buffer Overflow
NXP MCUXpresso SDK USB middleware versions before 2.13.0 contain a heap buffer overflow in host audio, video, and CDC class drivers that trust device-supplied descriptor values...
NXP MCUXpresso SDK USB Middleware Before 2.13.0 RNDIS Out-of-Bounds Read
NXP MCUXpresso SDK USB middleware versions before 2.13.0 contain an out-of-bounds read in USBDeviceCdcRndisSetCommand that can disclose device memory through crafted RNDIS SET messages...
CVE-2026-116488
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
CVE-2026-116487
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...
CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
CVE-2026-116488
The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions before 2.13.0 is vulnerable to a heap buffer overflow in the host audio, video, and CDC class drivers. The root cause is the improper trust of device-supplied bNumEndpoints and bLength values, which allows a malicious USB dev...
EUVD-2026-109815
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
EUVD-2026-109814
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...
CVE-2026-116487 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...
CVE-2026-116487 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USBDeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OIDGENCURRENTPACKETFILTER or...
CVE-2026-116487
The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions prior to 2.13.0 is vulnerable to an out-of-bounds read in the USB_DeviceCdcRndisSetCommand() function. The vulnerability occurs because the software trusts a host-supplied informationBufferOffset. A malicious USB host can exp...
NXP MCUXpresso MCUXpresso SDK buffer error vulnerability
Versions of the NXP MCUXpresso SDK prior to 2.13.0 contain a buffer error vulnerability. This vulnerability arises because USBDeviceCdcRndisSetCommand trusts informationBufferOffset provided by the host. A malicious USB host can send RNDIS SET messages containing OIDGENCURRENTPACKETFILTER or...
PT-2026-123337
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains an out-of-bounds read vulnerability in USB DeviceCdcRndisSetCommand that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OID GEN CURRENT PACKET FILTER or OID 802 3...
NXP MCUXpresso MCUXpresso SDK buffer error vulnerability
Versions of the NXP MCUXpresso SDK prior to 2.13.0 contain a buffer error vulnerability. This vulnerability arises because host audio, video, and CDC class drivers trust the bNumEndpoints and bLength values provided by the device. A malicious USB device can supply specially crafted descriptors th...
PT-2026-123338
NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...
CVE-2021-27421
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDKMalloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the he...