CVE-2021-38260: Buffer Overflow
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor().
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-38260?
CVE-2021-38260 is a vulnerability in NXP MCUXpresso SDK v2.7.0 that allows for a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor().
How does CVE-2021-38260 impact NXP MCUXpresso SDK?
CVE-2021-38260 can be exploited to cause a buffer overflow in NXP MCUXpresso SDK v2.7.0, potentially leading to remote code execution or denial of service.
What is the severity of CVE-2021-38260?
CVE-2021-38260 has a severity rating of 7.8 (high).
How can I fix CVE-2021-38260?
To fix CVE-2021-38260, it is recommended to update to a patched version of NXP MCUXpresso SDK that addresses the buffer overflow vulnerability.
Where can I find more information about CVE-2021-38260?
More information about CVE-2021-38260 can be found at the following reference: [NXP MCUXpresso SDK Buffer Overflow](https://mcusec.github.io/vulnerabilities_details#nxp_usb)