CVE-2022-45163: Nxp I.mx 6 Firmware

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)

Affected products

  • Nxp I.mx 6 Firmware: affected versions not specified
  • Nxp I.mx 6dual Firmware: affected versions not specified
  • Nxp I.mx 6duallite Firmware: affected versions not specified
  • Nxp I.mx 6dualplus Firmware: affected versions not specified
  • Nxp I.mx 6quad Firmware: affected versions not specified
  • Nxp I.mx 6quadplus Firmware: affected versions not specified
  • Nxp I.mx 6solo Firmware: affected versions not specified
  • Nxp I.mx 6sololite Firmware: affected versions not specified
  • Nxp I.mx 6solox Firmware: affected versions not specified
  • Nxp I.mx 6ull Firmware: affected versions not specified
  • Nxp I.mx 6ultralite Firmware: affected versions not specified
  • Nxp I.mx 6ulz Firmware: affected versions not specified
  • Nxp I.mx 7dual Firmware: affected versions not specified
  • Nxp I.mx 7solo Firmware: affected versions not specified
  • Nxp I.mx 7ulp Firmware: affected versions not specified
  • Nxp I.mx 8m Mini Firmware: affected versions not specified
  • Nxp I.mx 8m Quad Firmware: affected versions not specified
  • Nxp I.mx 8m Vybrid Firmware: affected versions not specified
  • Nxp I.mx RT1010 Firmware: affected versions not specified
  • Nxp I.mx RT1015 Firmware: affected versions not specified
  • Nxp I.mx RT1020 Firmware: affected versions not specified
  • Nxp I.mx RT1050 Firmware: affected versions not specified
  • Nxp I.mx RT1060 Firmware: affected versions not specified

Published 2022-11-18. Last modified 2026-06-17.