CVE-2026-96406

Name of the Vulnerable Software and Affected Versions USBX (affected versions not specified)

Description A VideoStreaming interface reports the size of its class-specific descriptor block in the wTotalLength field of its input header. The host uses this value as the budget for processing format, frame, and frame-interval descriptors without verifying it against the actual configuration descriptor received. If a device reports a wTotalLength larger than the descriptors it provides, the host continues dereferencing the cursor past the end of the configuration buffer when the application queries format or frame data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.