CVE-2021-44479: Nxp Kinetis k82 Firmware

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.

Affected products

• Nxp Kinetis k82 Firmware: affected versions not specified

Published 2021-12-01. Last modified 2026-06-17.