Threats tagged 'ghsa-74fm-34h8-j2pw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116487NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability Medium5.12026-10-26GCVE DatabaseCVE-2026-116487 NXP MCUXpresso SDK USB middleware versions before 2.13.0 contain an out-of-bounds read vulnerability in the USB_DeviceCdcRndisSetCommand() function. This flaw arises because the function trusts a host-supplied informationBufferOffset, allowing a malicious USB host to send crafted RNDIS SET messages with out-of-range offsets. Exploiting this vulnerability can lead to disclosure of device memory. Report on CVE-2026-116487 Vulnerability CWE-125 #ghsa-74fm-34h8-j2pw	GCVE Database	2026-10-26

Page 1 of 1