CVE-2021-27421
High
Description
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.
SeverityHigh
CVSS7.3
Exploit probability—
ProductNxp Mcuxpresso Software Development Kit
PublishedMay 3, 2022
First seenMay 3, 2022
Weakness typeCWE-190Integer overflow
How to fix
Update
- nxp mcuxpresso_software_development_kit2.8.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nxp mcuxpresso_software_development_kit | v < 2.8.2 | 2.8.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.