mcuxsdk-middleware-usb vulnerabilities
CVEs whose affected-version data names the mcuxsdk-middleware-usb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116488Medium· 6.8NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can s…
▾ SunlitNXP · mcuxsdk-middleware-usbvia CVEORG
CVE-2026-116487Medium· 4.6NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset. A malicious USB host can send RN…
▾ SunlitNXP · mcuxsdk-middleware-usbvia CVEORG