{"id":"CVE-2026-96402","published":"2026-10-20T15:17:37.170","lastModified":"2026-10-20T19:48:50.250","description":"A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-2ch9-p8xv-fwp6","tags":[]}],"exploitRefs":[{"url":"https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-2ch9-p8xv-fwp6","tags":[]}],"hasPoc":true,"ai":null}