NXP

Products

Exploited and recent CVEs

• CVE-2026-118786 Medium 6.8 NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions –
• CVE-2026-118785 Medium 6.7 NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions –
• CVE-2026-116488 Medium 6.8 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers 0.4%
• CVE-2026-116487 Medium 4.6 NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS Out-of-Bounds Read 0.3%
• CVE-2026-87726 Low 3.9 Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, pote <0.1%
• CVE-2021-22680 High 7.3 NXP MQX Integer Overflow or Wraparound 1.6%
• CVE-2021-27421 High 7.3 NXP MCUXpresso SDK Integer Overflow or Wraparound 0.9%