Description
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.
Published: 2026-10-20
Score: 5.2 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 14:45:00 +0000

Type Values Removed Values Added
Description A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.
Title USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
Weaknesses CWE-125
References
Metrics cvssV4_0

{'score': 5.2, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: eclipse

Published:

Updated: 2026-10-20T15:36:16.427Z

Reserved: 2026-09-23T13:43:04.322Z

Link: CVE-2026-96402

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-20T15:17:37.170

Modified: 2026-10-20T15:17:37.170

Link: CVE-2026-96402

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses