Buffer Overflow in Cisco RoomOS USB Driver

CVE-2026-20302

What is CVE-2026-20302?

A vulnerability in the USB driver of Cisco RoomOS enables an unauthenticated local attacker with physical access to exploit it by connecting a malicious USB device. This security flaw stems from insufficient boundary checks for specific data passed through the USB driver, which may lead to a buffer overflow condition on the system. Successful exploitation can result in the execution of arbitrary code with root privileges, posing a significant threat to the affected device. Ensure that your Cisco RoomOS is updated to mitigate this risk. Learn more in the Cisco advisory.

References