CVE-2021-27421

Katalog CVE

CVSS 9.8 · Critical EPSS 0,87%

Kerentanan Integer Overflow or Wraparound pada nxp mcuxpresso software development kit. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.

Rincian

Terbit di NVD

3 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mcuxpresso.nxp.com/en/welcome product · advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 advisory pihak ketiga · pemerintah AS