CVE-2021-40154

CVE-2021-40154 Уязвимости чтения за пределами буфера в USB-режиме внутрисистемного программирования ISP для LPC55S69 и K82 POC для проверки уязвимости BootROM, обнаруженной в LPC55S69 и K82 Series Revision A2. Уязвимость устранена в новых устройствах с Revision A3 для LPC55S69. Уязвимые устройств...

PT-2021-22822

Name of the Vulnerable Software and Affected Versions NXP LPC55S69 devices before A3 NXP Kinetis K82 devices affected versions not specified Description The issue is related to a buffer over-read that occurs when a crafted wlength value is sent in a GET Descriptor Configuration request or a GET...

PT-2021-24114

Name of the Vulnerable Software and Affected Versions: NXP Kinetis K82 devices affected versions not specified Description: The issue is related to a buffer over-read that occurs when a crafted wlength value is used in a GET Status-Other request during USB In-System Programming ISP mode. This...

CVE-2021-40154: Out-of-bounds Read

NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...