CVE-2026-116487 | NXP mcuxsdk-middleware-usb up to 2.12.x RNDIS USB_DeviceCdcRndisSetCommand informationBufferOffset out-of-bounds

SecurityVulns
Yanac

A vulnerability was found in NXP mcuxsdk-middleware-usb up to 2.12.x. It has been rated as problematic. Affected is the function USB_DeviceCdcRndisSetCommand of the component RNDIS. Performing a manipulation of the argument informationBufferOffset results in out-of-bounds read.

This vulnerability is reported as CVE-2026-116487. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More