CVE-2017-7936: Buffer Overflow
A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid VF6xx. When the device is configured in security enabled configuration, SDP could be used to download a small section of code to an unprotected region of memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7936?
CVE-2017-7936 has a high severity rating due to the potential for remote code execution through a stack-based buffer overflow.
How do I fix CVE-2017-7936?
To fix CVE-2017-7936, ensure that you update the affected NXP firmware to the latest patched version provided by the vendor.
What devices are affected by CVE-2017-7936?
CVE-2017-7936 affects various NXP devices including the i.MX 50, i.MX 53, and several Vybrid models.
What are the potential impacts of CVE-2017-7936?
The potential impacts of CVE-2017-7936 include unauthorized access, remote code execution, and denial of service on affected devices.
Is there a workaround for CVE-2017-7936?
There is no specific workaround for CVE-2017-7936; updating to a patched firmware version is the recommended action.