NXP i.MX Product Family

Risk Summary

REPOSTED INFORMATION

CVEs (2)

Remediations

• Because this is a hardware vulnerability, there are no software workarounds available.
• For i.MX 6UltraLite and i.MX 6ULL devices, users are encouraged to program an eFUSE to disable the Serial Download Protocol (SDP) port to mitigate the vulnerabilities.
• NXP reports a mitigation is to prevent physical access to the respective USB OTG or UART ports used by SDP in the final customer production board design.
• NXP has confirmed that the vulnerabilities have been mitigated in new versions of silicon revisions with an updated ROM module.
• For more information NXP has released an Errata and Engineering Bulletin that can be obtained from NXP support teams.

Affected Vendors

Affected Products (22)