Nxp

Mcuxpresso Software Development Kit

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2021-27421

  • EPSS 0.45%
  • Published 03.05.2022 21:15:08
  • Last modified 21.11.2024 05:57:57

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when as...

7.8

CVE-2021-38258

Exploit
  • EPSS 0.06%
  • Published 25.10.2021 22:15:07
  • Last modified 21.11.2024 06:16:41

NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback().

7.8

CVE-2021-38260

Exploit
  • EPSS 0.06%
  • Published 25.10.2021 22:15:07
  • Last modified 21.11.2024 06:16:41

NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor().

8.8

CVE-2019-17519

Exploit
  • EPSS 0.08%
  • Published 12.02.2020 19:15:14
  • Last modified 21.11.2024 04:32:25

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet.

6.5

CVE-2019-17060

  • EPSS 0.5%
  • Published 10.02.2020 21:51:09
  • Last modified 21.11.2024 04:31:37

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes certain memory contents upon recei...