n-romanovich usb-test up to 1.1.4 Disk Geometry driveinfo.cpp getSectorSize out-of-bounds write

Summaryinfo

A vulnerability, which was classified as critical, was found in n-romanovich usb-test up to 1.1.4. This vulnerability affects the function getSectorSize of the file USB Test/src/driveinfo.cpp of the component Disk Geometry Handler. Such manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2026-116776. An attack has to be approached locally. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in n-romanovich usb-test up to 1.1.4. Affected by this issue is the function getSectorSize of the file USB Test/src/driveinfo.cpp of the component Disk Geometry Handler. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize() in USB Test/src/driveinfo.cpp trusts DISK_GEOMETRY.BytesPerSector returned by IOCTL_DISK_GET_DRIVE_GEOMETRY without checking whether the call succeeded or enforcing size bounds. USB Test/src/drivetest.cpp uses the value for division and to size a heap buffer before memcpy(buffer.data(), &sector, 8), so a physically connected malicious USB storage device can report a value below eight bytes and cause repeated out-of-bounds writes, or report zero and cause a divide-by-zero denial of service when a user starts a drive test. The heap corruption can crash the elevated application and may permit arbitrary code execution. This issue is fixed in version 1.1.5.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-116776 since 10/26/2026. The exploitation is known to be easy. The attack needs to be approached locally. Additional levels of successful authentication are needed for exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

Upgrading to version 1.1.5 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• n-romanovich

Name

• usb-test

Version

• 1.1.0
• 1.1.1
• 1.1.2
• 1.1.3
• 1.1.4

Website

• Product: https://github.com/n-romanovich/usb-test/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion