CVE-2026-96402 — USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulti…
Published: 2026-10-20 · CVSS: 5.2 · CVSS 4.0
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7