Live › vulnerability › CVE-2026-116488
Go to dashboardThe NXP MCUXpresso SDK USB host middleware trusts endpoint counts and lengths from a connected USB device, so a malicious device can write past a fixed heap array. An attacker with such a device can corrupt memory to crash the firmware or run code on the microcontroller.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 14:30 UTC. All times on this page are UTC.
Teams building embedded firmware on NXP MCUXpresso SDK that acts as a USB host and enables the host audio, video or CDC class drivers. Devices that only act as USB peripherals, or that do not enable these host class drivers, are not exposed through this code path.
No product ranges from the sources yet.
mcuxsdk-middleware-usb in your MCUXpresso SDK manifest or project; versions below 2.13.0 are affected.mcuxsdk-middleware-usb to 2.13.0 or later and rebuild the firmware.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the fixed-size epList array, corrupting heap memory for code execution or denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-116488")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.