MS
Product
Mcuxpresso Software Development Kit
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Mcuxpresso Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27421 | 9.8 | May 3 | NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a… Affected: before 2.8.2 |
| CVE-2019-17519 | 8.8 | Feb 12 | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to… Affected: through 2.2.1 |
| CVE-2021-38260 | 7.8 | Oct 25 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor() Affected: 2.7.0 |
| CVE-2021-38258 | 7.8 | Oct 25 | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback() Affected: 2.7.0 |
| CVE-2019-17060 | 6.5 | Feb 10 | The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict… Affected: through 2.2.1 |
Showing 5