Fiche vulnérabilité
CVE-2021-27421 : faille critique nxp mcuxpresso software development kit (CVSS 9.8)
Description
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 3 mai 2022
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- nxp mcuxpresso software development kit