← Database

CVE-2022-22819

HIGH CVSS: 7.8 Published: 2022-03-23 Modified: 2026-06-17

Description

NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature is verified. This can allow an attacker to achieve non-persistent code execution via a crafted unsigned update.

Affected Platforms

Nxp Lpc55S69Jbd64Nxp Lpc55S69Jbd64 FirmwareNxp Lpc55S66Jev98 FirmwareNxp Lpc55S66Jbd64 FirmwareNxp Lpc55S69Jev98Nxp Lpc55S66Jev98Nxp Lpc55S66Jbd100Nxp Lpc55S66Jbd100 FirmwareNxp Lpc55S69Jbd100 FirmwareNxp Lpc55S69Jev98 Firmware

Weakness Type

CWE-120

References