Read the docs

NXP

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

NXP records in CISA KEV

No NXP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mcuxpresso Software Development Kit 5 records MEDIUM I.mx 6dual Firmware 3 records LOW I.mx 6duallite Firmware 3 records LOW I.mx 6dualplus Firmware 3 records LOW I.mx 6quad Firmware 3 records LOW I.mx 6quadplus Firmware 3 records LOW I.mx 6solo Firmware 3 records LOW I.mx 6sololite Firmware 3 records LOW

Records

5 records in Mcuxpresso Software Development Kit · all components

TI-2021-08911 CVE-2021-27421 · GHSA-78hf-2qv8-j9h7

NXP MCUXpresso SDK Integer Overflow or Wraparound

Priority MEDIUM 50

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2022-05-03 Fixed in 2.8.2 CWE-190
TI-2019-13063 CVE-2019-17519 · GHSA-5mcg-w6rc-w6jr

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does…

Priority MEDIUM 40

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted pack…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01187 Published 2020-02-12 No fix listed CWE-120
TI-2019-12728 CVE-2019-17060 · GHSA-r525-xggp-55g5

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the…

Priority LOW 30

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes cert…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00825 Published 2020-02-10 No fix listed CWE-120
Open these records in search →