Description
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.
Published: 2026-10-08
Score: 6.5 Medium
EPSS: 1.2% Low
KEV: No
Impact: Memory Corruption or Denial of Service
Action: Apply Patch
AI Analysis

Impact

NXP MQX Classic firmware versions prior to 5.0 contain an out-of-bounds write in the RTCS UDP recvfrom implementation. A specially crafted UDP packet can overflow the receive buffer, leading to memory corruption or a system crash. The issue does not document arbitrary code execution, but the overflow could destabilize the device.

Affected Systems

Embedded devices running NXP MQX Classic older than version 5.0 that expose a UDP service are affected. The issue is limited to systems that accept UDP traffic on the affected stack.

Risk and Exploitability

The CVSS score of 6.5 places this issue in the medium severity range. The EPSS score of 1% indicates a low probability of exploitation, and it is not listed in the CISA KEV catalog, indicating it has not yet been widely exploited. Likely exploitation requires an attacker to remotely deliver a malicious UDP packet to the vulnerable device. Successful exploitation would result in memory corruption or a denial of service, compromising availability and potentially integrity of the system.

Generated by OpenCVE AI on October 8, 2026 at 18:38 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any vendor patch or upgrade to an MQX version that removes the buffer overflow flaw.
  • Configure firewalls or network policies to block or restrict UDP traffic from untrusted sources until a patch is available.
  • Monitor device logs and network traffic for abnormal or malformed UDP packets that could indicate an attempted exploit.

Generated by OpenCVE AI on October 8, 2026 at 18:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Title MQX Classic UDP recvfrom Buffer Overflow

Thu, 08 Oct 2026 02:45:00 +0000

Type Values Removed Values Added
Description NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.
First Time appeared Nxp
Nxp mqx
Weaknesses CWE-787
CPEs cpe:2.3:a:nxp:mqx:*:*:*:*:*:*:*:*
Vendors & Products Nxp
Nxp mqx
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L'}

Subscriptions

Nxp Mqx
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-15T18:10:13.528Z

Reserved: 2026-09-09T02:15:30.303Z

Link: CVE-2017-20283

cve-icon Vulnrichment

Updated: 2026-10-15T16:14:16.132Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-08T03:16:32.343

Modified: 2026-10-15T19:17:08.607

Link: CVE-2017-20283

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T18:45:17Z

Weaknesses