CVE-2022-22819: Buffer Overflow
First published: Wed Mar 23 2022(Updated: )
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature is verified. This can allow an attacker to achieve non-persistent code execution via a crafted unsigned update.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nxp Lpc55s66jbd64 Firmware | ||
| NXP LPC55S66JBD64 | ||
| Nxp Lpc55s66jbd100 Firmware | ||
| Nxp Lpc55s66jbd100 | ||
| Nxp Lpc55s66jev98 Firmware | ||
| Nxp Lpc55s66jev98 | ||
| Nxp Lpc55s69jbd64 Firmware | ||
| Nxp Lpc55s69jbd64 | ||
| Nxp Lpc55s69jbd100 Firmware | ||
| Nxp Lpc55s69jbd100 | ||
| Nxp Lpc55s69jev98 Firmware | ||
| Nxp Lpc55s69jev98 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this NXP vulnerability?
The vulnerability ID for this NXP vulnerability is CVE-2022-22819.
What is the severity of CVE-2022-22819?
The severity of CVE-2022-22819 is high.
Which microcontrollers are affected by CVE-2022-22819?
The NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers are affected by CVE-2022-22819.
How does the vulnerability in the NXP microcontrollers occur?
The vulnerability in the NXP microcontrollers occurs due to a buffer overflow in parsing SB2 updates before the signature is verified.
Can an attacker achieve code execution with CVE-2022-22819?
Yes, an attacker can achieve non-persistent code execution through a crafted unsigned firmware update.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nxp
- canonical/nxp lpc55s66jbd64 firmware
- canonical/nxp lpc55s66jbd64
- canonical/nxp lpc55s66jbd100 firmware
- canonical/nxp lpc55s66jbd100
- canonical/nxp lpc55s66jev98 firmware
- canonical/nxp lpc55s66jev98
- canonical/nxp lpc55s69jbd64 firmware
- canonical/nxp lpc55s69jbd64
- canonical/nxp lpc55s69jbd100 firmware
- canonical/nxp lpc55s69jbd100
- canonical/nxp lpc55s69jev98 firmware
- canonical/nxp lpc55s69jev98