Vulnerabilities > NXP > Low

DATE CVE VULNERABILITY TITLE RISK
2021-12-01 CVE-2021-44479 Out-of-bounds Read vulnerability in NXP Kinetis K82 Firmware
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode.
local
low complexity
nxp CWE-125
2.1
2021-12-01 CVE-2021-40154 Out-of-bounds Read vulnerability in NXP products
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode.
local
low complexity
nxp CWE-125
2.1
2021-06-06 CVE-2021-33881 Incorrect Authorization vulnerability in NXP products
On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a Monotonic Counter protection mechanism.
local
nxp CWE-863
1.9