8.8
CVSSv3

CVE-2019-17519

Published: 12/02/2020 Updated: 02/11/2022
CVSS v2 Base Score: 5.8 | Impact Score: 6.4 | Exploitability Score: 6.5
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 517
Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Bluetooth Low Energy implementation on NXP SDK up to and including 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nxp mcuxpresso_software_development_kit