CVE-2026-116488 | NXP mcuxsdk-middleware-usb up to 2.12.x Host Class Drivers bNumEndpoints/bLength heap-based overflow

October 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in NXP mcuxsdk-middleware-usb up to 2.12.x. Affected by this vulnerability is an unknown functionality of the component Host Class Drivers. Executing a manipulation of the argument bNumEndpoints/bLength can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-116488. The attack requires local access. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More