USBX Vulnerability in VideoStreaming Interface Affecting Device Descriptor Handling

CVE-2026-96406

What is CVE-2026-96406?

The vulnerability in the USBX VideoStreaming interface arises when the wTotalLength field in the input header incorrectly reports a larger size than the actual descriptors provided. This leads the system to mistakenly allocate an excessive buffer for parsing format, frame, and interval descriptors. Consequently, when an application requests data that exceeds the real buffer size, the system may dereference a cursor that goes beyond the legitimate boundaries of the configuration buffer, potentially leading to memory corruption or undefined behavior. This scenario poses serious risks such as data exposure or application crashes.

References