Veille CVE

Recherche « Nordic Semiconductor ASA nRF Connect SDK »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Nordic Semiconductor ASA nRF Connect SDK » ✕
  1. CVE-2026-18796 6.8 Moyenne

    Nordic Semiconductor ASA nRF5340

    Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.

  2. CVE-2026-14297 8.7 Élevée

    Nordic Semiconductor ASA nRF Connect SDK

    A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on the linker-assigned BSS layout of the specific firmware build, which may vary.