CVE-2021-31532: Nxp I.mx RT500 Firmware

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.

Affected products

• Nxp I.mx RT500 Firmware: affected versions not specified
• Nxp I.mx RT600 Firmware: affected versions not specified
• Nxp LPC5512JBD100 Firmware: affected versions not specified
• Nxp LPC5512JBD64 Firmware: affected versions not specified
• Nxp LPC5514JBD100 Firmware: affected versions not specified
• Nxp LPC5514JBD64 Firmware: affected versions not specified
• Nxp LPC5516JBD100 Firmware: affected versions not specified
• Nxp LPC5516JBD64 Firmware: affected versions not specified
• Nxp LPC5516JEV98 Firmware: affected versions not specified
• Nxp LPC5526 Firmware: affected versions not specified
• Nxp LPC5528 Firmware: affected versions not specified
• Nxp LPC55S14JBD100 Firmware: affected versions not specified
• Nxp LPC55S14JBD64 Firmware: affected versions not specified
• Nxp LPC55S16JBD100 Firmware: affected versions not specified
• Nxp LPC55S16JBD64 Firmware: affected versions not specified
• Nxp LPC55S16JEV98 Firmware: affected versions not specified
• Nxp LPC55S26 Firmware: affected versions not specified
• Nxp LPC55S28 Firmware: affected versions not specified
• Nxp LPC55S66JBD100 Firmware: affected versions not specified
• Nxp LPC55S69JBD100 Firmware: affected versions not specified
• Nxp LPC55S69JBD64 Firmware: affected versions not specified
• Nxp LPC55S69JEV98 Firmware: affected versions not specified
• Nxp LPCS66JBD64 Firmware: affected versions not specified
• Nxp LPCS66JEV98 Firmware: affected versions not specified

Published 2021-05-06. Last modified 2026-06-17.