An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
Metrics
Affected Vendors & Products
References
History
Wed, 30 Apr 2025 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: mitre
Published: 2022-11-18T00:00:00.000Z
Updated: 2025-04-30T14:38:50.059Z
Reserved: 2022-11-11T00:00:00.000Z
Link: CVE-2022-45163

Updated: 2024-08-03T14:09:56.466Z

Status : Modified
Published: 2022-11-18T23:15:29.807
Modified: 2025-04-30T15:15:59.090
Link: CVE-2022-45163

No data.