CVE-2026-96582

The USBX HID Report Descriptor Parser is vulnerable to a heap out-of-bounds read during ordinary enumeration. The root cause is a check-after-use flaw where the host validates that an item fits in the descriptor only after advancing past the header and parsing the payload. Because the analysis fa...