Flaw in MQX Operating System Could Put Internet of Things in Crosshairs

An ICS‑CERT advisory warns of critical vulnerabilities in NXP's MQX RTOS — a DHCP client buffer overflow that may allow remote code execution and a DNS client out‑of‑bounds read causing DoS — affecting many embedded devices (ColdFire, Kinetis, i.MX, Vybrid). NXP has published mitigation guidance and intends to release patched MQX versions; exposure is significant where devices are internet‑reachable or can be used as internal pivot points.