Skip to content
OpenAdvisories

Vendor

NXP

8 known vulnerabilities.

Products

MCUXpresso SDK 3 mcuxsdk-middleware-usb 2 MQX 2 NxpNfcRdLib 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-116488 Public exploit

    NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

    NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descript…

    NXP mcuxsdk-middleware-usb
  • Medium 4.6
    CVE-2026-116487 Public exploit

    NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read

    NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for O…

    NXP mcuxsdk-middleware-usb