CVE-2026-10668 | zephyrproject Zephyr up to 4.4.x udc_numaker.c numaker_hsusbd_ep_trigger CEPTXCNT denial of service (EUVD-2026-43245)

A vulnerability categorized as problematic has been discovered in zephyrproject Zephyr up to 4.4.x. Affected is the function numaker_hsusbd_ep_trigger of the file drivers/usb/udc/udc_numaker.c of the component Nuvoton NuMaker HSUSBD USB Device-Controller Driver. Such manipulation of the argument CEPTXCNT leads to denial of service. This vulnerability is uniquely identified as CVE-2026-10668. Local access is required to approach this attack. No exploit exists.