Approved changes feed: RSS · Atom

cpe:2.3:a:nxp:mcuxpresso_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNxp (2c4d2203-ccbd-50e6-842f-582e7fe949e0)
ProductMcuxpresso Sdk (30113935-defd-5b69-a35d-36ab41db9873)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27421 vulnerable 2026-06-08 05:31:21.416345 NXP MCUXpresso SDK Integer Overflow or Wraparound
HIGH (7.3)
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.
Published: 2022-05-03T20:24:23.000Z
Updated: 2025-04-16T16:24:46.545Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.