← Database

CVE-2021-40154

MEDIUM CVSS: 6.1 Published: 2021-12-01 Modified: 2026-06-17

Description

NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.

Affected Platforms

Nxp Lpc55S69Jbd64Nxp Lpc55S69Jbd64 FirmwareNxp Lpc55S69Jev98Nxp Lpc55S69Jbd100 FirmwareNxp Lpc55S69Jev98 FirmwareNxp Lpc55S69Jbd100

Weakness Type

CWE-125

References