CVE-2026-96402 — USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count

CVE-2026-96402

USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count PUBLISHED

Description (CNA)

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse ThreadX - USBX	affected 0 through 6.5.1.202602; unaffected 6.5.2.202603

CWE

CWE-125

References

https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-2ch9-p8xv-fwp6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.