Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-116488— NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

Quick assessment

Affected

NXP mcuxsdk-middleware-usb

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NXP MCUXpresso SDK 的 USB 中间件（mcuxsdk-middleware-usb）在 2.13.0 版本之前存在堆缓冲区溢出漏洞，该问题存在于主机端的音频、视频和 CDC 类驱动程序中。这些驱动程序会信任设备提供的和字段值。恶意 USB 设备可发送经过篡改的描述符，将端点条目写入固定大小的数组之外，从而破坏堆内存，导致代码执行或拒绝服务攻击。

CVSS 6.8 · Medium EPSS 0.37% · P31 Updated Oct 26, 2026

In-the-Wild Activity Observed github_trending · low

Possible ATT&CK Techniques 3 AI

T1068 · Exploitation for Privilege Escalation T1055 · Process Injection T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

Vendor	Product	Version Range	Status
NXP	mcuxsdk-middleware-usb	`< 2.13.0`	affected
		`2.13.0`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

Source: CVE Program / CVE List V5

Vulnerability Description

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the fixed-size epList array, corrupting heap memory for code execution or denial of service.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

堆缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
NXP	mcuxsdk-middleware-usb	0 ~ 2.13.0	-

II. Public POCs for CVE-2026-116488

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116488

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-116488 (2)

Vendor Advisories for CVE-2026-116488 (1)

🔗 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers | Advisories | VulnCheck third-party-advisory

Vendor Pages for CVE-2026-116488 (1)

🔗 GitHub - nxp-mcuxpresso/mcuxsdk-middleware-usb: MCUXpresso SDK USB stack Middleware · GitHub product

https://www.cve.org/CVERecord?id=CVE-2026-116488

IV. Related Vulnerabilities

Same product: mcuxsdk-middleware-usb

CVE-2026-116487
NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of

Same vendor: NXP

Same weakness: CWE-122