cve/2021/CVE-2021-40154.md

CVE-2021-40154

Description

NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.

POC

Reference

• https://github.com/Xen1thLabs-AE/CVE-2021-40154

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Jeromeyoung/CVE-2021-40154
• https://github.com/Xen1thLabs-AE/CVE-2021-40154
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC