Vulnerability · Published Oct 26, 2026 · Assigned by VulnCheck

CVE-2026-116488NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

Medium 6.8

In plain English

A medium-severity heap buffer overflow in mcuxsdk-middleware-usb from NXP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.4%top 68.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the fixed-size epList array, corrupting heap memory for code execution or denial of service.

Affected products (as reported)

Vendor	Product	Versions
NXP	mcuxsdk-middleware-usb	0 – before 2.13.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Patch Commit patch
Fix Commit (video) patch
Fix Commit (audio) patch
https://github.com/nxp-mcuxpresso/mcuxsdk-middleware-usb/blob/release/26.06.00/host/class/usb_host_audio.c#L517 technical-description
MCUXpresso SDK Release Notes release-notes
https://github.com/nxp-mcuxpresso/mcuxsdk-middleware-usb product
VulnCheck Advisory: NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers third-party-advisory