What is GHSA-vq76-7hqc-pgvj?

GHSA-vq76-7hqc-pgvj is a security advisory published by GitHub Security Advisories with Medium severity. NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom...

Which CVE IDs does GHSA-vq76-7hqc-pgvj cover?

GHSA-vq76-7hqc-pgvj covers the following CVE IDs: CVE-2017-20283. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vq76-7hqc-pgvj?

GHSA-vq76-7hqc-pgvj has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-vq76-7hqc-pgvjMediumCVSS 6.5

NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2017-20283 →

📋 Description

NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-20283
https://community.nxp.com/t5/MQX-Software-Solutions/Horrible-memory-leak-in-recvfrom-that-has-gone-completely/m-p/705993
https://github.com/advisories/GHSA-vq76-7hqc-pgvj