CVE-2026-47104

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Out-of-bounds Read pada libusb. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.

Rincian

Terbit di NVD

27 Mei 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libusb/libusb/commit/578ab76b4c434f8b204137ab6d7310689c7a9704 patch
• https://github.com/libusb/libusb/pull/1814 issue tracking · patch
• https://www.vulncheck.com/advisories/libusb-out-of-bounds-read-in-parse-iad-array patch · advisory pihak ketiga
• https://github.com/libusb/libusb/issues/1813 issue tracking · mitigasi
• https://github.com/libusb/libusb/releases/tag/v1.0.30 product · release notes