CVE-2017-20283

NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.

CVSS 3.1

6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-25)

CWE

CWE-787

Published

2026-10-08

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

References

• https://community.nxp.com/t5/MQX-Software-Solutions/Horrible-memory-leak-in-recvfrom-that-has-gone-completely/m-p/705993

Check your stackJSON