CVE-2026-116488: NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the fixed-size epList array, corrupting heap memory for code execution or denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
mcuxsdk-middleware-usbto a version that resolves this vulnerability.Fixed in 2.13.0
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using NXP MCUXpresso SDK USB middleware before version 2.13.0 are affected when they use the USB host audio, video, or CDC class drivers.
What does an attacker need to exploit the vulnerability?
An attacker needs to present a malicious USB device to the affected system. The device supplies crafted USB descriptors with bNumEndpoints or bLength values that cause writes beyond the fixed-size epList array.
What can exploitation cause?
The out-of-bounds writes can corrupt heap memory. The reported impacts include code execution or denial of service.