CVE-2021-38260: Nxp Mcuxpresso Software Development Kit

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDescriptor().

Affected products

• Nxp Mcuxpresso Software Development Kit: version 2.7.0 only

Published 2021-10-25. Last modified 2026-06-17.