316 matches found
Buffer overflow
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
Design/Logic Flaw
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-44479
CVE-2021-44479 affects NXP Kinetis K82 devices. A buffer over-read occurs in a GET Status-Other request during USB In-System Programming (ISP) mode due to a crafted wlength value, leading to disclosure of protected flash memory. The provided documents do not specify exploited campaigns or a publi...
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming ISP mode. This discloses protected flash memory...
CVE-2021-40154
CVE-2021-40154 affects NXP LPC55S69 devices prior to revision A3. In USB In-System Programming (ISP) mode, a crafted wlength value in a GET Descriptor Configuration request can trigger a buffer over-read, exposing protected flash memory. The linked documents confirm the root cause as a buffer ove...
Exploit for Out-of-bounds Read in Nxp Lpc55S69Jbd100_Firmware
CVE-2021-40154...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
Buffer overflow
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
Buffer overflow
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
CVE-2021-38260
CVE-2021-38260 affects NXP MCUXpresso SDK v2.7.0. A buffer overflow in USB_HostParseDeviceConfigurationDescriptor() could cause memory corruption. CVSSv3.1 base score 7.8 (LOCAL, LOW exploitability, LOW privileges, NONE user interaction) with HIGH impact on confidentiality, integrity, and availab...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
CVE-2021-38258
CVE-2021-38258 affects NXP MCUXpresso SDK v2.7.0, where a buffer overflow is caused by a memory boundary validation issue in USB_HostProcessCallback(). The vulnerability is rooted in improper boundary checks during memory operations, potentially enabling overflow conditions (buffer/heap) as descr...
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
Nxp Semiconductors Nxp Mcu Xpresso Sdk 安全漏洞
The Nxp Semiconductors Nxp Mcu Xpresso Sdk is a comprehensive software support package from Nxp Semiconductors in the Netherlands. It is used to customize and download the Sdk for a specific processor or evaluation board selection, accelerating software development. A security vulnerability exist...
Breaking the NFC chips in tens of millions of smart phones, and a few PoS systems
This second post is a companion to the DEF CON 29 video. Starts at 25:43 here. About a year ago I did some research into adding new capabilities to Samsung’s NFC chips in their smartphones, by bypassing their signature protection and applying code patches. This allowed me to add custom NFC tag...