What’s Vulnerable › Products

azure-rtos usbx vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your azure-rtos usbx version is affected

Latest azure-rtos usbx vulnerabilities

• CVE-2026-96402 — USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count (CVSS 5.2)
• CVE-2026-96582 — Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser (CVSS 4.9)
• CVE-2026-96406 — VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound (CVSS 4.9)
• CVE-2025-55095 — (CVSS 7.0)
• CVE-2025-55100 — Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func() (CVSS 9.1)
• CVE-2025-55099 — Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate() (CVSS 6.1)
• CVE-2025-55098 — Potential out-of-bounds read in _ux_host_class_audio_device_type_get() (CVSS 6.1)
• CVE-2025-55097 — Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get() (CVSS 6.1)
• CVE-2025-55096 — Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get() (CVSS 6.1)
• CVE-2023-48698 — Azure RTOS USBX Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2023-48697 — Azure RTOS USBX Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2023-48696 — Azure RTOS USBX Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2023-48695 — Azure RTOS USBX Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2023-48694 — Azure RTOS USBX Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2022-39293 — Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow (CVSS 9.8)
• CVE-2022-36063 — USBX Host CDC ECM integer underflow with buffer overflow (CVSS 9.8)
• CVE-2022-29246 — Potential buffer overflow in function DFU upload in Azure RTOS USBX (CVSS 9.8)
• CVE-2022-29223 — Buffer overflow on HUB descriptor in Azure RTOS USBX (CVSS 9.8)