CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2022-22819
High (7.8) in nxp. EPSS 1.4% chance of exploitation in the next 30 days.
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature is verified. This can allow an attacker to achieve non-persistent code execution via a crafted unsigned update.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nxp:lpc55s66jbd100_firmware
- nxp:lpc55s66jbd64_firmware
- nxp:lpc55s66jev98_firmware
- nxp:lpc55s69jbd100_firmware
- nxp:lpc55s69jbd64_firmware
- nxp:lpc55s69jev98_firmware