Stack-Based Buffer Overflow in NXP i.MX and Vybrid Products
CVE-2017-7936

6.3MEDIUM

Key Information:

Vendor

Nxp

Status
Nxp I.mx Product Family
Vendor
CVE Published:
7 August 2017

What is CVE-2017-7936?

A stack-based buffer overflow issue has been identified in various NXP i.MX and Vybrid products. This vulnerability arises when devices are configured with security enabled settings, allowing for the potential exploitation via SDP to load a section of code into an unprotected memory area. Effective mitigation strategies should be implemented to safeguard against unauthorized memory access.

Affected Version(s)

NXP i.MX Product Family NXP i.MX Product Family

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02
x_refsource_MISC
http://www.securityfocus.com/bid/99966
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.