Description (CNA)
NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.darkmatter.ae/xen1thlabs/published-advisories/
- https://github.com/Xen1thLabs-AE/CVE-2021-40154
ADP enrichment
No English description supplied.