PT-2026-64386

libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse iad array in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffe...