Riskcovery

CVE-2021-26461

malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds

State
Published
Severity
Not scored
Published
Jun 21, 2021
Updated
Aug 3, 2024
Reserved
Jan 30, 2021

Read the record on cve.org

Description

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-190 INTEGER OVERFLOW OR WRAPAROUND CWE-190

Affected Products

ProductVersions
Apache NuttXApache Software Foundation
  • Apache NuttX to before 10.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.