High severity7.3NVD Advisory· Published May 3, 2022· Updated Jun 17, 2026
CVE-2021-27421
CVE-2021-27421
Description
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.
Affected products
3- cpe:2.3:a:nxp:mcuxpresso_software_development_kit:*:*:*:*:*:*:*:*Range: <2.8.2
<2.8.2+ 1 more
- (no CPE)range: <2.8.2
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- mcuxpresso.nxp.com/en/welcomenvdProductVendor Advisory
- www.cisa.gov/uscert/ics/advisories/icsa-21-119-04nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.