CVE-2021-44479

NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode

Medium · published December 1, 2021

CVSS v3.1
6.1
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:L/A:L/C:H/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Published
2021-12-01T14:56Z
EPSS history
Timeline
  • 01 DEC 14:56Z
    NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode
    cvelistv5