Out-of-bounds reads and writes to the FTP Server RX buffer in Keil MDK-Middleware 8.3.0 can corrupt memory. The vulnerability is a classic buffer overrun (CWE‑195) that may allow an attacker to read or overwrite arbitrary memory locations, potentially leading to denial of service or other impact if the compromised buffer influences critical program state.

Keil MDK‑Middleware version 8.3.0, the middleware component providing FTP server functionality. Any system that deploys this middleware and exposes the FTP service is at risk.

The CVSS score of 6.5 places this issue in the medium severity range. There is no publicly disclosed exploitation probability (EPSS score is not available), and the vulnerability is not listed in CISA KEV, so no confirmed public exploits exist. Because the flaw involves out-of-bounds memory access, it poses a risk of memory corruption that could lead to service disruption or other impacts if the corrupted buffer influences critical program state. The likely attack vector is a remote FTP client that sends data provoking the boundary violation, as inferred from the FTP server buffer reference.