Heap Buffer Vulnerability in USBX Host by Eclipse

CVE-2026-96402

What is CVE-2026-96402?

A vulnerability exists in the USBX host that allows a malicious USB MTP/PTP device to exploit heap buffer handling during object enumeration. This issue could lead to the unintended disclosure of adjacent heap memory contents to the application or trigger faults due to access of unmapped pages. Proper validation and sanitation mechanisms should be implemented to mitigate potential risks associated with device enumeration and memory handling.

References