CVE-2021-27417
eCosCentric eCosPro RTOS Integer Overflow or Wraparound
- State
- Published
- Severity
- 4.6 Medium
- Published
- May 3, 2022
- Updated
- Apr 16, 2025
- Reserved
- Feb 19, 2021
Description
eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.6 Medium | CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H | icscert |
Weaknesses
- CWE-190 Integer Overflow or Wraparound
Affected Products
| Product | Versions |
|---|---|
eCosPro RTOSeCosCentric |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.