CVEvulnerability

CVE-2017-7936

6.3 MEDIUM Published 2017-08-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.3 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119, CWE-121

Description

A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid VF6xx. When the device is configured in security enabled configuration, SDP could be used to download a small section of code to an unprotected region of memory.

Affected configurations

• nxp vybrid mvf30nn151cku26 firmware • nxp vybrid mvf30ns151cku26 firmware • nxp vybrid mvf50nn151cmk40 firmware • nxp vybrid mvf50nn151cmk50 firmware • nxp vybrid mvf50ns151cmk40 firmware • nxp vybrid mvf50ns151cmk50 firmware • nxp vybrid mvf51nn151cmk50 firmware • nxp vybrid mvf51ns151cmk50 firmware • nxp vybrid mvf60nn151cmk40 firmware • nxp vybrid mvf60ns151cmk40 firmware • nxp vybrid mvf60nn151cmk50 firmware • nxp vybrid mvf60ns151cmk50 firmware • nxp vybrid mvf61nn151cmk50 firmware • nxp vybrid mvf61ns151cmk50 firmware • nxp vybrid mvf62nn151cmk40 firmware • nxp i.mx 50 firmware • nxp i.mx 53 firmware • nxp i.mx 6ull firmware • nxp i.mx 6ultralite firmware • nxp i.mx 6sololite firmware • nxp i.mx 6solo firmware • nxp i.mx 6duallite firmware • nxp i.mx 6solox firmware • nxp i.mx 6dual firmware • nxp i.mx 6quad firmware • nxp i.mx 6quadplus firmware • nxp i.mx 6dualplus firmware

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-121 Stack-based Buffer Overflow weakness

References