CVE-2017-20283
Received Received - Intake

Out-of-Bounds Write in NXP MQX Classic

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: MITRE

Description
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2017-20283
EUVD
EUVD-2017-19018

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NXP MQX 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds write flaw in NXP MQX Classic versions before 5.0. It occurs in the RTCS UDP recvfrom() function where the application-supplied receive buffer length is not properly enforced. A crafted UDP packet can overflow the destination buffer, leading to memory corruption or denial of service.

Detection Guidance

This vulnerability involves an out-of-bounds write in NXP MQX Classic's RTCS UDP recvfrom() function. Detection requires monitoring for unexpected UDP packet sizes or crashes in MQX-based systems. Check for memory corruption signs like crashes in RTCS services or unusual network traffic patterns targeting UDP ports. Use network monitoring tools like Wireshark to inspect UDP packet sizes and payloads for anomalies.

Impact Analysis

This vulnerability could allow attackers to corrupt memory or crash systems by sending specially crafted UDP packets. This may result in service disruption, application instability, or unauthorized access depending on the system's configuration and usage.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR or HIPAA by enabling memory corruption or denial of service through crafted UDP packets. Such disruptions may lead to unauthorized data access or service unavailability, which are critical concerns under these regulations.

Mitigation Strategies

Upgrade NXP MQX Classic to version 5.0 or later to address the out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2017-20283. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart