Eclipse Foundation Eclipse ThreadX - USBX

• CVE-2026-96402 Medium 5.2 USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count 0.2%
• CVE-2026-96406 Medium 4.9 VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound 0.2%
• CVE-2026-96582 Medium 4.9 Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser 0.2%
• CVE-2025-55095 Medium 4.2 The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi 0.2%