rpm package
opensuse/libusb-1_0&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/libusb-1_0&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-47104 | Med | 4.0 | < 1.0.28-160000.3.1 | 1.0.28-160000.3.1 | May 27, 2026 | libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use | |
| CVE-2026-23679 | Med | 6.2 | < 1.0.28-160000.3.1 | 1.0.28-160000.3.1 | May 27, 2026 | libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descripto |
- affected < 1.0.28-160000.3.1fixed 1.0.28-160000.3.1
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use
- affected < 1.0.28-160000.3.1fixed 1.0.28-160000.3.1
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descripto