Eclipse USBX Out-of-Bounds Read Vulnerability in Audio Streaming Descriptor Parsing

A potential out-of-bounds read vulnerability has been identified in the USBX USB support module for Eclipse Foundation ThreadX, prior to version 6.4.3. The issue arises in the function '_ux_host_class_audio_streaming_sampling_get()', which parses USB audio streaming interface descriptors. The vulnerability occurs because the function does not properly validate the length of the descriptor before reading specific frequency values, leading to a possible out-of-bounds memory read. This could be exploited by a malicious USB device to cause crashes or disclose memory contents.

Impact

Exploitation of this vulnerability could result in crashes or unintended memory disclosure.

Remediation

Users can upgrade to USBX version 6.4.3 or later to address this vulnerability.