Skip to content
OpenAdvisories

Vendor

NXP

8 known vulnerabilities.

Products

MCUXpresso SDK 3 mcuxsdk-middleware-usb 2 MQX 2 NxpNfcRdLib 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-118786

    NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions

    Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example (multicore_examples/rpmsg_lite_pingpong_tzm) up to releases 26.06.00-lts and 26.09.00 may allow a non-secure caller to supply unvali…

    NXP MCUXpresso SDK
  • Medium 6.7
    CVE-2026-118785

    NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions

    Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples), affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or unt…

    NXP MCUXpresso SDK
  • Medium 6.8
    CVE-2026-116488 Public exploit

    NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

    NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descript…

    NXP mcuxsdk-middleware-usb
  • Medium 4.6
    CVE-2026-116487 Public exploit

    NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read

    NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset. A malicious USB host can send RNDIS SET messages for O…

    NXP mcuxsdk-middleware-usb
  • Medium 6.5
    CVE-2017-20283

    NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Imp…

    NXP MQX