medium6.1
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode.
Impact
NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nxp | Kinetis K82 Firmware | All versions |