{"id":"CVE-2017-20283","revision":"68580d0bc1de4c498f30f02a2ad7f6bb","records":[{"revision":"68580d0bc1de4c498f30f02a2ad7f6bb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2017-20283","aliases":[],"title":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destin…","description":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","state":0,"publishedAt":"2026-10-08T02:12:10.697+00:00","modifiedAt":"2026-10-15T18:10:13.528+00:00","affected":[{"ecosystem":"Vendor product","name":"MQX","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"MQX\",\n                    \"vendor\": \"NXP\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"5.0 Classic\",\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","score":6.5,"severity":"MEDIUM"}],"references":["https://community.nxp.com/t5/MQX-Software-Solutions/Horrible-memory-leak-in-recvfrom-that-has-gone-completely/m-p/705993"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2017-20283","license":"CVE Program Terms of Use","key":"cve-program:CVE-2017-20283","identifiers":["CVE-2017-20283"]},"retained":false,"historicalAffected":[]}],"coverage":[]}