CVE-2026-96402
MEDIUM—CVSS v3
—CVSS v2
0.18%
EPSS (exploit probability)
CWE-125CWE
Description
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.
Affected routers (0)
No routers currently mapped to this CVE in our database.