12 matches found
CVE-2021-40154
CVE-2021-40154 LPC55S69 and K82 USB In-System Programming ISP Buffer Over Read Vulnerabilities POC to test the BootROM vulnerability found in LPC55S69 and K82 Series Revision A2. The vulnerability is fixed in newer devices with newe Revision A3 for LPC55S69. Vulnerable Devices: Confirmed: LPC55S6...
EUVD-2021-27339
Malware in sbrugna...
CVE-2022-22819
The CVE-2022-22819 entry concerns NXP LPC55S66JBD64/100, LPC55S66JEV98, LPC55S69JBD64/100, and LPC55S69JEV98 microcontrollers (ROM version 1B). A buffer overflow occurs while parsing SB2 updates before the update signature is verified, allowing an attacker to achieve non-persistent code execution...
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
Design/Logic Flaw
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-40154
CVE-2021-40154 affects NXP LPC55S69 devices prior to revision A3. In USB In-System Programming (ISP) mode, a crafted wlength value in a GET Descriptor Configuration request can trigger a buffer over-read, exposing protected flash memory. The linked documents confirm the root cause as a buffer ove...
CVE-2021-40154: Out-of-bounds Read
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
PT-2021-22822
Name of the Vulnerable Software and Affected Versions NXP LPC55S69 devices before A3 NXP Kinetis K82 devices affected versions not specified Description The issue is related to a buffer over-read that occurs when a crafted wlength value is sent in a GET Descriptor Configuration request or a GET...
NXP Semiconductors NXP LPC55S69 Buffer Error Vulnerability
The Nxp Semiconductors Nxp Lpc55S69 is a development board from Nxp Semiconductors, Netherlands. It is used to add off-the-shelf add-on boards for networking, sensors, displays and other interfaces. Nxp Semiconductors NXP LPC55S69 devices A3 previously contained a security vulnerability that...
