CVE-2026-116487
Received Received - Intake

USB Out-of-Bounds Read in NXP MCUXpresso SDK

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulnCheck

Description
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for OID_GEN_CURRENT_PACKET_FILTER or OID_802_3_MULTICAST_LIST with an out-of-range offset to read and disclose device memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116487
EUVD
EUVD-2026-109814

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NXP mcuxsdk-middleware-usb 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read issue in NXP MCUXpresso SDK USB middleware before version 2.13.0. It occurs in the function USB_DeviceCdcRndisSetCommand() which incorrectly trusts a host-supplied offset value. A malicious USB host can exploit this by sending RNDIS SET messages with invalid offsets for OID_GEN_CURRENT_PACKET_FILTER or OID_802_3_MULTICAST_LIST, causing the device to read and disclose its memory contents.

Impact Analysis

If exploited, this vulnerability could allow an attacker connected via USB to read sensitive device memory. This may lead to information disclosure, including potentially confidential or proprietary data stored in the device's memory. The impact depends on the device's use case and the sensitivity of the data it handles.

Compliance Impact

This vulnerability could potentially violate compliance requirements under GDPR or HIPAA if exploited to access protected health information or personal data. Organizations using affected devices may face regulatory penalties, data breach notifications, and reputational damage due to unauthorized memory disclosure.

Mitigation Strategies

Update the NXP MCUXpresso SDK USB middleware to version 2.13.0 or later to address the out-of-bounds read vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116487. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart