Nxp Mqx vulnerabilities

2 CVEs affecting Nxp Mqx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-20283, published 2026-10-08.

More from Nxp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-22680, published 2022-05-03. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation,…
• CVE-2017-20283, published 2026-10-08. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a…