CVE-2019-17060 - CVE House
Back to Database
Status published Medium CVE-2019-17060

The Bluetooth Low Energy (BLE) stack implementation on the NXP...

Vulnerability Description

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17060

Credits & Attribution

No credits recorded in the NVD database.

References

More from nxp

View All →
CVE-2022-45163
An information-disclosure vulnerability exists on select NXP devices when configured...
Medium 5.3
CVE-2022-22819
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM...
High 7.8
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a...
Medium 6.1
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via...
Medium 6.1
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer...
High 7.8

Affected Vendor

Affected Software

mcuxpresso software development kit
Vulnerable Versions:
0

Timeline

Official Publish: February 10th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.