Skip to content

CVE-2017-20283 NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a c...

MediumCVSS 6.5 EPSS 1.2%
Published
Updated
Exploit status
No public exploit known

Description

NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.

Affected products

ProductAffected versionsFixed in
NXP mqx < 5.0 Classic 5.0 Classic

References