mcuxpresso software development kit vulnerabilities and fixes

Recent CVEs affecting mcuxpresso software development kit, with upgrade or downgrade steps. 5 tracked.

Also searched as: mcuxpressosoftwaredevelopmentkit.

mcuxpresso software development kit has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-05-03. Highest priority: CVE-2019-17519 (score 53/100).

• CVE-2021-38260 HIGH 7.8 DOWNGRADE NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfi
• CVE-2021-38258 HIGH 7.8 DOWNGRADE NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback(
• CVE-2021-27421 HIGH 7.3 UPGRADE NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which co
• CVE-2019-17519 HIGH 8.8 UPGRADE The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict
• CVE-2019-17060 MEDIUM 6.5 UPGRADE The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetoo

FAQ

How do I fix mcuxpresso software development kit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mcuxpresso software development kit being exploited right now?

None of the tracked mcuxpresso software development kit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mcuxpresso software development kit CVE should I patch first?

CVE-2019-17519 currently ranks highest (53/100): The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict .

RSS feed for mcuxpresso software development kit · ← Back to latest CVEs