CVE-2017-20283

NXP / MQX PUBLISHED

Description (CNA)

NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.

Affected (CNA)

Vendor / product	Versions
NXP / MQX	affected 0 before 5.0 Classic

CWE

CWE-787

References

https://community.nxp.com/t5/MQX-Software-Solutions/Horrible-memory-leak-in-recvfrom-that-has-gone-completely/m-p/705993

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.