Back to Database
Status published
Medium
CVE-2019-14239
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices,...
Vulnerability Description
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14239
Credits & Attribution
No credits recorded in the NVD database.
References
More from nxp
View All →CVE-2022-45163
An information-disclosure vulnerability exists on select NXP devices when configured...
Medium
5.3
CVE-2022-22819
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM...
High
7.8
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a...
Medium
6.1
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via...
Medium
6.1
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer...
High
7.8
Affected Vendor
Affected Software
kinetis kv1x firmware, kinetis kv3x firmware, kinetis k8x firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
September 24th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.