CVE-2026-23679— libusb < 1.0.30 NULL Pointer Dereference in parse_interface()
Possible ATT&CK Techniques 2AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-23679
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
libusb < 1.0.30 NULL Pointer Dereference in parse_interface()
Source: NVD (National Vulnerability Database)
Vulnerability Description
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exceeds the remaining buffer size, causing parse_interface() to return early without allocating the endpoint array. Attackers can exploit this flaw through libusb_get_active_config_descriptor or libusb_get_config_descriptor by providing crafted descriptors via virtualized USB passthrough, file-based descriptor parsing, or network sources, causing any application iterating over endpoints to dereference a NULL endpoint pointer and crash.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
libusb 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libusb是libusb开源的一个跨平台USB设备访问库。 libusb 1.0.30之前版本存在缓冲区错误漏洞，该漏洞源于包含空指针取消引用漏洞，攻击者通过提供格式错误的USB配置描述符，导致parse_interface()提前返回而未分配端点数组，进而使任何迭代端点的应用程序取消引用空端点指针并崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-23679
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23679
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-23679 (2)
Vendor Advisories for CVE-2026-23679 (2)
Vendor Pages for CVE-2026-23679 (1)
IV. Related Vulnerabilities
Same weakness: CWE-125
- CVE-2026-45681
OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback us - CVE-2026-25258
Out-of-bounds Read in DSP Service - CVE-2026-10267
janet-lang janet debug.c doframe out-of-bounds - CVE-2026-10233
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence - CVE-2026-8796
Sereal::Decoder versions before 5.005 for Perl allow heap ou
V. Comments for CVE-2026-23679
No comments yet