Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: NXP Component: Mcuxpresso Software Development Kit Clear all filters
TI-2021-08911 CVE-2021-27421 · GHSA-78hf-2qv8-j9h7

NXP MCUXpresso SDK Integer Overflow or Wraparound

Priority MEDIUM 50

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2022-05-03 Fixed in 2.8.2 CWE-190
TI-2019-13063 CVE-2019-17519 · GHSA-5mcg-w6rc-w6jr

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does…

Priority MEDIUM 40

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted pack…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01187 Published 2020-02-12 No fix listed CWE-120
TI-2019-12728 CVE-2019-17060 · GHSA-r525-xggp-55g5

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the…

Priority LOW 30

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes cert…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00825 Published 2020-02-10 No fix listed CWE-120