NXP kayıtları
nxp üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-125 Out-of-bounds Read2
- CWE-190 Integer Overflow or Wraparound2
- CWE-863 Incorrect Authorization2
- CWE-203 Observable Discrepancy1
- CWE-281 Improper Preservation of Permissions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-14237İstismar yok | On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only acnxp · kinetis kv1x firmware · CWE-863 | Kritik9,8 | — | %2,9 | 12 Eyl 2019 |
39İzleyin | CVE-2021-22680İstismar yok | NXP MQX Integer Overflow or Wraparoundnxp · mqx · CWE-190 | Kritik9,8 | — | %1,6 | 3 May 2022 |
39İzleyin | CVE-2021-27421İstismar yok | NXP MCUXpresso SDK Integer Overflow or Wraparoundnxp · mcuxpresso software development kit · CWE-190 | Kritik9,8 | — | %0,9 | 3 May 2022 |
35İzleyin | CVE-2019-17519İstismar yok | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length,nxp · mcuxpresso software development kit · CWE-120 | Yüksek8,8 | — | %1,2 | 12 Şub 2020 |
31İzleyin | CVE-2022-22819İstismar yok | NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a nxp · lpc55s66jbd64 firmware · CWE-120 | Yüksek7,8 | — | %1,4 | 23 Mar 2022 |
31İzleyin | CVE-2021-44149İstismar yok | An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0.trustedfirmware · op-tee | Yüksek7,8 | — | %0,3 | 7 Ara 2021 |
31İzleyin | CVE-2021-38260İstismar yok | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor().nxp · mcuxpresso software development kit · CWE-120 | Yüksek7,8 | — | %0,3 | 25 Eki 2021 |
31İzleyin | CVE-2021-38258İstismar yok | NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback().nxp · mcuxpresso software development kit · CWE-120 | Yüksek7,8 | — | %0,3 | 25 Eki 2021 |
31İzleyin | CVE-2023-39902İstismar yok | A software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before 2023.07 on select NXP i.MX 8M family procesnxp · uboot secondary program loader · CWE-281 | Yüksek7,8 | — | %0,2 | 17 Eki 2023 |
28İzleyin | CVE-2021-36133İstismar yok | The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass becaunxp · i.mx 6 · CWE-732 | Yüksek7,1 | — | %0,3 | 7 Ara 2021 |
27İzleyin | CVE-2021-31532İstismar yok | NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x nxp · lpc55s69jbd100 firmware | Orta6,8 | — | %0,5 | 6 May 2021 |
26İzleyin | CVE-2019-17060İstismar yok | The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 andnxp · mcuxpresso software development kit · CWE-120 | Orta6,5 | — | %0,8 | 10 Şub 2020 |
26İzleyin | CVE-2019-14239İstismar yok | On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only acnxp · kinetis kv1x firmware · CWE-287 | Orta6,6 | — | %0,4 | 24 Eyl 2019 |
25İzleyin | CVE-2017-7936İstismar yok | A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6Dunxp · vybrid mvf30nn151cku26 firmware · CWE-121 | Orta6,3 | — | %0,3 | 7 Ağu 2017 |
24İzleyin | CVE-2017-7932İstismar yok | An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vnxp · vybrid mvf30nn151cku26 firmware · CWE-295 | Orta6,0 | — | %0,3 | 7 Ağu 2017 |
22İzleyin | CVE-2021-40154Kavram kanıtı | NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of Unxp · lpc55s69jbd100 firmware · CWE-125 | Orta5,5 | — | %0,8 | 1 Ara 2021 |
22İzleyin | CVE-2021-44479İstismar yok | NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Progranxp · kinetis k82 firmware · CWE-125 | Orta5,5 | — | %0,3 | 1 Ara 2021 |
18İzleyin | CVE-2022-45163İstismar yok | An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, inxp · i.mx 6 firmware · CWE-203 | Orta4,6 | — | %0,6 | 18 Kas 2022 |
16İzleyin | CVE-2021-33881İstismar yok | On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass anxp · mifare ultralight ev1 firmware · CWE-863 | Orta4,2 | — | %0,4 | 6 Haz 2021 |
16İzleyin | CVE-2021-3011İstismar yok | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication micronxp · 3a081 · CWE-670 | Orta4,2 | — | %0,2 | 7 Oca 2021 |
- CVE-2019-1423740Planlayın
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only ac
KritikCVSS 9,8İstismar yokEPSS %3nxp · kinetis kv1x firmware12 Eyl 2019
- CVE-2021-2268039İzleyin
NXP MQX Integer Overflow or Wraparound
KritikCVSS 9,8İstismar yokEPSS %2nxp · mqx3 May 2022
- CVE-2021-2742139İzleyin
NXP MCUXpresso SDK Integer Overflow or Wraparound
KritikCVSS 9,8İstismar yokEPSS %1nxp · mcuxpresso software development kit3 May 2022
- CVE-2019-1751935İzleyin
The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length,
YüksekCVSS 8,8İstismar yokEPSS %1nxp · mcuxpresso software development kit12 Şub 2020
- CVE-2022-2281931İzleyin
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a
YüksekCVSS 7,8İstismar yokEPSS %1nxp · lpc55s66jbd64 firmware23 Mar 2022
- CVE-2021-4414931İzleyin
An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0.
YüksekCVSS 7,8İstismar yokEPSS %0trustedfirmware · op-tee7 Ara 2021
- CVE-2021-3826031İzleyin
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor().
YüksekCVSS 7,8İstismar yokEPSS %0nxp · mcuxpresso software development kit25 Eki 2021
- CVE-2021-3825831İzleyin
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback().
YüksekCVSS 7,8İstismar yokEPSS %0nxp · mcuxpresso software development kit25 Eki 2021
- CVE-2023-3990231İzleyin
A software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before 2023.07 on select NXP i.MX 8M family proces
YüksekCVSS 7,8İstismar yokEPSS %0nxp · uboot secondary program loader17 Eki 2023
- CVE-2021-3613328İzleyin
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass becau
YüksekCVSS 7,1İstismar yokEPSS %0nxp · i.mx 67 Ara 2021
- CVE-2021-3153227İzleyin
NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x
OrtaCVSS 6,8İstismar yokEPSS %0nxp · lpc55s69jbd100 firmware6 May 2021
- CVE-2019-1706026İzleyin
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and
OrtaCVSS 6,5İstismar yokEPSS %1nxp · mcuxpresso software development kit10 Şub 2020
- CVE-2019-1423926İzleyin
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only ac
OrtaCVSS 6,6İstismar yokEPSS %0nxp · kinetis kv1x firmware24 Eyl 2019
- CVE-2017-793625İzleyin
A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6Du
OrtaCVSS 6,3İstismar yokEPSS %0nxp · vybrid mvf30nn151cku26 firmware7 Ağu 2017
- CVE-2017-793224İzleyin
An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, V
OrtaCVSS 6,0İstismar yokEPSS %0nxp · vybrid mvf30nn151cku26 firmware7 Ağu 2017
- CVE-2021-4015422İzleyin
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of U
OrtaCVSS 5,5Kavram kanıtıEPSS %1nxp · lpc55s69jbd100 firmware1 Ara 2021
- CVE-2021-4447922İzleyin
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Progra
OrtaCVSS 5,5İstismar yokEPSS %0nxp · kinetis k82 firmware1 Ara 2021
- CVE-2022-4516318İzleyin
An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i
OrtaCVSS 4,6İstismar yokEPSS %1nxp · i.mx 6 firmware18 Kas 2022
- CVE-2021-3388116İzleyin
On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a
OrtaCVSS 4,2İstismar yokEPSS %0nxp · mifare ultralight ev1 firmware6 Haz 2021
- CVE-2021-301116İzleyin
An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication micro
OrtaCVSS 4,2İstismar yokEPSS %0nxp · 3a0817 Oca 2021