https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:01:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12832 bdu:2026-12832 https://cve.radiocsirt.org/vuln/bdu:2026-12832 https://cve.radiocsirt.org/vuln/bell-cve-2026-23679 <p><strong>Affected:</strong> Alpaquita:23: libusb, Alpaquita:25: libusb, Alpaquita:stream: libusb</p> <p><strong>Affected:</strong> Alpaquita:23: libusb, Alpaquita:25: libusb, Alpaquita:stream: libusb</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-23679 https://cve.radiocsirt.org/vuln/euvd-2026-336559 EUVD-2026-336559 https://cve.radiocsirt.org/vuln/euvd-2026-336559 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23679 <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23679 https://cve.radiocsirt.org/vuln/ghsa-jp69-qvgm-mqwx <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> https://cve.radiocsirt.org/vuln/ghsa-jp69-qvgm-mqwx https://cve.radiocsirt.org/vuln/msrc_cve-2026-23679 msrc_CVE-2026-23679 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23679 https://cve.radiocsirt.org/vuln/oesa-2026-2742 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libusbx</p> <p>libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C (Haiku backend in C++) and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version (see COPYING). Security Fix(es):</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.(CVE-2026-23679)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libusbx</p> <p>libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C (Haiku backend in C++) and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version (see COPYING). Security Fix(es):</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.(CVE-2026-23679)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2742 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21783-1 <p>Security update for libusb-1_0</p> <p>Security update for libusb-1_0</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21783-1 https://cve.radiocsirt.org/vuln/pysec-2026-3978 <p><strong>Affected:</strong> PyPI: libusb</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> <p><strong>Affected:</strong> PyPI: libusb</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3978 https://cve.radiocsirt.org/vuln/rhsa-2026:20075 <p>libusb: libusb: Denial of Service via malformed USB configuration descriptor libusb: libusb: Denial of Service via malformed USB descriptor</p> <p>libusb: libusb: Denial of Service via malformed USB configuration descriptor libusb: libusb: Denial of Service via malformed USB descriptor</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20075 https://cve.radiocsirt.org/vuln/suse-su-2026:23450-1 <p>Security update for libusb-1_0</p> <p>Security update for libusb-1_0</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23450-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23679 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libusb, Ubuntu:16.04:LTS: libusb, Ubuntu:18.04:LTS: libusb, Ubuntu:20.04:LTS: libusb, Ubuntu:22.04:LTS: libusb, Ubuntu:24.04:LTS: libusb, Ubuntu:25.10: libusb, Ubuntu:26.04:LTS: libusb</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libusb, Ubuntu:16.04:LTS: libusb, Ubuntu:18.04:LTS: libusb, Ubuntu:20.04:LTS: libusb, Ubuntu:22.04:LTS: libusb, Ubuntu:24.04:LTS: libusb, Ubuntu:25.10: libusb, Ubuntu:26.04:LTS: libusb</p> <p>libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23679