Eclipse Threadx - Usbx (Eclipse Foundation) - vulnerabilities (CVEs)

4 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-20. Vendor: Eclipse Foundation.

CVEs of Eclipse Threadx - Usbx

• CVE-2026-96402 - CVSS 5.2 (medium), 2026-10-20: A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the…
• CVE-2026-96406 - CVSS 4.9 (medium), 2026-10-20: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX host…
• CVE-2026-96582 - CVSS 4.9 (medium), 2026-10-20: A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over…
• CVE-2025-55095 - CVSS 7 (high), 2026-01-27: The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended…