JLSEC-2026-666

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-666.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-666.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2026-666

Upstream

CVE-2026-47104

EUVD-2026-32500

GHSA-fh6g-r8pf-wqgw

Published

2026-07-14T14:59:33.004Z

Modified

2026-07-25T18:24:45.245490048Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in...

Details

libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.

Database specific

{
    "sources": [
        {
            "imported": "2026-07-17T22:22:14.738Z",
            "id": "CVE-2026-47104",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-47104",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47104",
            "modified": "2026-07-14T22:16:58.530Z",
            "database_specific": {
                "status": "Analyzed"
            },
            "published": "2026-05-27T14:17:32.590Z"
        },
        {
            "id": "GHSA-fh6g-r8pf-wqgw",
            "url": "https://api.github.com/advisories/GHSA-fh6g-r8pf-wqgw",
            "html_url": "https://github.com/advisories/GHSA-fh6g-r8pf-wqgw",
            "modified": "2026-05-27T15:33:28Z",
            "imported": "2026-07-17T22:22:14.916Z",
            "published": "2026-05-27T15:33:24Z"
        },
        {
            "id": "EUVD-2026-32500",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-32500",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32500",
            "modified": "2026-07-14T21:33:01Z",
            "imported": "2026-07-17T22:22:24.287Z",
            "published": "2026-05-27T13:20:44Z"
        }
    ],
    "license": "CC-BY-4.0"
}

References

Affected packages

Julia / libusb_jll

Package

Name: libusb_jll
Purl: pkg:julia/libusb_jll?uuid=a877fdc9-fe69-5ed6-b93d-11ecd0dc2d49

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.30+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-666.json"