CVE-2026-96582: CWE-125 Out-of-bounds Read in Eclipse Foundation Eclipse ThreadX - USBX

The vulnerability in Eclipse ThreadX USBX involves improper bounds checking when parsing HID report descriptors. Specifically, the USBX host processes each item in the descriptor by advancing past the header and parsing the payload before verifying that the item fits within the descriptor's length. The analysis relied on declared sizes without validating them against the actual data length received. Consequently, a malicious or malformed HID device returning a shorter-than-expected report descriptor can trigger a heap out-of-bounds read during normal device enumeration.

This vulnerability can cause a heap out-of-bounds read, potentially leading to application crashes or denial of service. The CVSS score of 4.9 (medium severity) reflects limited confidentiality impact (partial information disclosure possible), no integrity impact, but high availability impact (application crash). There is no indication of known exploits in the wild.

No official patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, cautious handling of HID devices and limiting exposure to untrusted USB peripherals may reduce risk.