Nxp Mcuxpresso Software Development Kit
5 CVEs affecting Nxp Mcuxpresso Software Development Kit. Latest disclosed: 2022-05-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-17519 | High | 8.8 | 2020-02-12 | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers… |
CVE-2021-38260 | High | 7.8 | 2021-10-25 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor(). |
CVE-2021-38258 | High | 7.8 | 2021-10-25 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback(). |
CVE-2021-27421 | High | 7.3 | 2022-05-03 | NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the… |
CVE-2019-17060 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not… |