{"schema_version":1,"title":"NXP vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in NXP: 4 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-90591, was published on 9 November 2026. 5 vulnerabilities in the last four weeks, up 67% on the four before (3).","url":"https://junglewise.ai/threats/vendors/nxp","json_url":"https://junglewise.ai/threats/vendors/nxp.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nxp","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":4,"all_time":11,"critical":0,"exploited":0,"last_7_days":4,"last_30_days":7,"last_90_days":10,"last_365_days":11},"latest":[{"cve":"CVE-2026-90591","cvss":7.5,"epss":0.0028,"slug":"cve-2026-90591-the-nxp-enet-qos-ethernet-driver-s-receive-work-handler-eth-nxp","title":"NXP ENET-QOS Ethernet driver DMA descriptor memory corruption","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:57.573+00:00","url":"https://junglewise.ai/threats/cve-2026-90591-the-nxp-enet-qos-ethernet-driver-s-receive-work-handler-eth-nxp"},{"cve":"CVE-2026-90590","cvss":6.5,"epss":0.0018,"slug":"cve-2026-90590-the-nxp-enet-qos-ethernet-driver-in-drivers-ethernet-eth-nxp-enet","title":"NXP ENET QoS Ethernet driver denial of service via link flap","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:57.417+00:00","url":"https://junglewise.ai/threats/cve-2026-90590-the-nxp-enet-qos-ethernet-driver-in-drivers-ethernet-eth-nxp-enet"},{"cve":"CVE-2026-118786","cvss":6.8,"slug":"cve-2026-118786-improper-input-validation-in-non-secure-callable-nsc-veneer","title":"NXP MCUXpresso SDK improper input validation in NSC veneer functions","severity":"medium","exploited":false,"published_at":"2026-11-06T23:17:20.97+00:00","url":"https://junglewise.ai/threats/cve-2026-118786-improper-input-validation-in-non-secure-callable-nsc-veneer"},{"cve":"CVE-2026-118785","cvss":6.7,"slug":"cve-2026-118785-improper-handling-of-non-secure-world-input-in-nsc-veneer","title":"NXP MCUXpresso SDK TrustZone-M NSC veneer input validation bypass","severity":"medium","exploited":false,"published_at":"2026-11-06T23:17:20.84+00:00","url":"https://junglewise.ai/threats/cve-2026-118785-improper-handling-of-non-secure-world-input-in-nsc-veneer"},{"cve":"CVE-2026-116488","cvss":6.8,"slug":"cve-2026-116488-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before","title":"NXP MCUXpresso SDK USB middleware heap buffer overflow","severity":"medium","exploited":false,"published_at":"2026-10-26T14:16:37.52+00:00","url":"https://junglewise.ai/threats/cve-2026-116488-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before"},{"cve":"CVE-2026-116487","cvss":4.6,"slug":"cve-2026-116487-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before","title":"NXP MCUXpresso SDK USB middleware out-of-bounds read in RNDIS","severity":"medium","exploited":false,"published_at":"2026-10-26T14:16:37.36+00:00","url":"https://junglewise.ai/threats/cve-2026-116487-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before"},{"cve":"CVE-2026-75083","cvss":5.9,"epss":0.0023,"slug":"cve-2026-75083-the-receive-path-of-the-nxp-kw41z-ieee-802-15-4-driver-kw41z-rx","title":"NXP KW41Z IEEE 802.15.4 driver buffer overflow in receive path","severity":"medium","exploited":false,"published_at":"2026-10-14T17:19:10.307+00:00","url":"https://junglewise.ai/threats/cve-2026-75083-the-receive-path-of-the-nxp-kw41z-ieee-802-15-4-driver-kw41z-rx"},{"cve":"CVE-2026-19736","cvss":7.8,"epss":0.0011,"slug":"cve-2026-19736-the-nxp-mcux-trng-entropy-driver-in-drivers-entropy-entropy-mcux","title":"NXP MCUX TRNG entropy driver buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-11T18:16:58.81+00:00","url":"https://junglewise.ai/threats/cve-2026-19736-the-nxp-mcux-trng-entropy-driver-in-drivers-entropy-entropy-mcux"},{"cve":"CVE-2026-18413","cvss":7.8,"slug":"cve-2026-18413-the-adc-api-requires-each-driver-to-reject-a-sampling-sequence","title":"NXP MCUX LPADC driver buffer overflow in ADC sampling","severity":"high","exploited":false,"published_at":"2026-09-28T21:17:17.09+00:00","url":"https://junglewise.ai/threats/cve-2026-18413-the-adc-api-requires-each-driver-to-reject-a-sampling-sequence"},{"cve":"CVE-2026-57014","cvss":7.8,"epss":0.001,"slug":"cve-2026-57014-nxp-nci-hal-out-of-bounds-write-in-nfc-initialization","title":"NXP NCI HAL out-of-bounds write in NFC initialization","severity":"high","exploited":false,"published_at":"2026-09-15T19:17:30.73+00:00","url":"https://junglewise.ai/threats/cve-2026-57014-nxp-nci-hal-out-of-bounds-write-in-nfc-initialization"},{"cve":"CVE-2025-29338","cvss":7.8,"slug":"cve-2025-29338-nxp-moal-ko-wi-fi-driver-stack-buffer-overflow-in-woal-init","title":"NXP moal.ko Wi-Fi driver stack buffer overflow in woal_init_module_param","severity":"info","exploited":false,"published_at":"2026-05-13T16:16:35.19+00:00","url":"https://junglewise.ai/threats/cve-2025-29338-nxp-moal-ko-wi-fi-driver-stack-buffer-overflow-in-woal-init"}],"vendor":{"hub":true,"name":"NXP","slug":"nxp","homepage":"https://www.nxp.com/","description":"NXP Semiconductors is a semiconductor manufacturer producing microcontrollers, processors, and wireless connectivity solutions.","url":"https://junglewise.ai/threats/vendors/nxp"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":2}],"most_severe":[{"cve":"CVE-2026-19736","cvss":7.8,"epss":0.0011,"slug":"cve-2026-19736-the-nxp-mcux-trng-entropy-driver-in-drivers-entropy-entropy-mcux","title":"NXP MCUX TRNG entropy driver buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-11T18:16:58.81+00:00","url":"https://junglewise.ai/threats/cve-2026-19736-the-nxp-mcux-trng-entropy-driver-in-drivers-entropy-entropy-mcux"},{"cve":"CVE-2026-57014","cvss":7.8,"epss":0.001,"slug":"cve-2026-57014-nxp-nci-hal-out-of-bounds-write-in-nfc-initialization","title":"NXP NCI HAL out-of-bounds write in NFC initialization","severity":"high","exploited":false,"published_at":"2026-09-15T19:17:30.73+00:00","url":"https://junglewise.ai/threats/cve-2026-57014-nxp-nci-hal-out-of-bounds-write-in-nfc-initialization"},{"cve":"CVE-2026-18413","cvss":7.8,"slug":"cve-2026-18413-the-adc-api-requires-each-driver-to-reject-a-sampling-sequence","title":"NXP MCUX LPADC driver buffer overflow in ADC sampling","severity":"high","exploited":false,"published_at":"2026-09-28T21:17:17.09+00:00","url":"https://junglewise.ai/threats/cve-2026-18413-the-adc-api-requires-each-driver-to-reject-a-sampling-sequence"},{"cve":"CVE-2026-90591","cvss":7.5,"epss":0.0028,"slug":"cve-2026-90591-the-nxp-enet-qos-ethernet-driver-s-receive-work-handler-eth-nxp","title":"NXP ENET-QOS Ethernet driver DMA descriptor memory corruption","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:57.573+00:00","url":"https://junglewise.ai/threats/cve-2026-90591-the-nxp-enet-qos-ethernet-driver-s-receive-work-handler-eth-nxp"},{"cve":"CVE-2026-118786","cvss":6.8,"slug":"cve-2026-118786-improper-input-validation-in-non-secure-callable-nsc-veneer","title":"NXP MCUXpresso SDK improper input validation in NSC veneer functions","severity":"medium","exploited":false,"published_at":"2026-11-06T23:17:20.97+00:00","url":"https://junglewise.ai/threats/cve-2026-118786-improper-input-validation-in-non-secure-callable-nsc-veneer"},{"cve":"CVE-2026-116488","cvss":6.8,"slug":"cve-2026-116488-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before","title":"NXP MCUXpresso SDK USB middleware heap buffer overflow","severity":"medium","exploited":false,"published_at":"2026-10-26T14:16:37.52+00:00","url":"https://junglewise.ai/threats/cve-2026-116488-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before"},{"cve":"CVE-2026-118785","cvss":6.7,"slug":"cve-2026-118785-improper-handling-of-non-secure-world-input-in-nsc-veneer","title":"NXP MCUXpresso SDK TrustZone-M NSC veneer input validation bypass","severity":"medium","exploited":false,"published_at":"2026-11-06T23:17:20.84+00:00","url":"https://junglewise.ai/threats/cve-2026-118785-improper-handling-of-non-secure-world-input-in-nsc-veneer"},{"cve":"CVE-2026-90590","cvss":6.5,"epss":0.0018,"slug":"cve-2026-90590-the-nxp-enet-qos-ethernet-driver-in-drivers-ethernet-eth-nxp-enet","title":"NXP ENET QoS Ethernet driver denial of service via link flap","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:57.417+00:00","url":"https://junglewise.ai/threats/cve-2026-90590-the-nxp-enet-qos-ethernet-driver-in-drivers-ethernet-eth-nxp-enet"},{"cve":"CVE-2026-75083","cvss":5.9,"epss":0.0023,"slug":"cve-2026-75083-the-receive-path-of-the-nxp-kw41z-ieee-802-15-4-driver-kw41z-rx","title":"NXP KW41Z IEEE 802.15.4 driver buffer overflow in receive path","severity":"medium","exploited":false,"published_at":"2026-10-14T17:19:10.307+00:00","url":"https://junglewise.ai/threats/cve-2026-75083-the-receive-path-of-the-nxp-kw41z-ieee-802-15-4-driver-kw41z-rx"},{"cve":"CVE-2026-116487","cvss":4.6,"slug":"cve-2026-116487-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before","title":"NXP MCUXpresso SDK USB middleware out-of-bounds read in RNDIS","severity":"medium","exploited":false,"published_at":"2026-10-26T14:16:37.36+00:00","url":"https://junglewise.ai/threats/cve-2026-116487-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before"}],"generated_at":"2026-11-12T19:07:00.167094+00:00","technologies":[]}