Integer overflow

2022-05-0321:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.5%

JSON

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.

CPENameOperatorVersion
mcuxpresso_software_development_kitlt2.8.2

CPE	Name	Operator	Version
	mcuxpresso_software_development_kit	lt	2.8.2

References

mcuxpresso.nxp.com/en/welcome

www.cisa.gov/uscert/ics/advisories/icsa-21-119-04