Security Advisory

CVE-2021-22680

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-03 20:25:18
Last updated 2025-04-16 16:24:38
Assigner icscert
State PUBLISHED

Description

NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.