Riskcovery

CVE-2021-27502

Texas Instruments TI-RTOS Integer Overflow or Wraparound

State
Published
Severity
7.4 High
Published
Nov 21, 2023
Updated
Aug 3, 2024
Reserved
Feb 19, 2021

Read the record on cve.org

Description

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hicscert

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
CC32XXTexas Instruments
  • before 4.40.00.07Affected
SimpleLink MSP432E4XXTexas Instruments
  • all versionsAffected
SimpleLink-CC13XXTexas Instruments
  • before 4.40.00Affected
SimpleLink-CC26XXTexas Instruments
  • before 4.40.00Affected
SimpleLink-CC32XXTexas Instruments
  • before 4.10.03Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.