CVE-2021-40154: Nxp LPC55S69JBD100 Firmware

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.

Affected products

• Nxp LPC55S69JBD100 Firmware: affected versions not specified
• Nxp LPC55S69JBD64 Firmware: affected versions not specified
• Nxp LPC55S69JEV98 Firmware: affected versions not specified

Published 2021-12-01. Last modified 2026-06-17.