← CVE Intelligence

CVE-2021-27504

Texas Instruments FREERTOS Integer Overflow or Wraparound PUBLISHED

Description (CNA)

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

Affected (CNA)

Vendor / productVersions
Texas Instruments / CC32XXaffected 0 before 4.40.00.07
Texas Instruments / SimpleLink MSP432E4XXaffected all versions
Texas Instruments / SimpleLink-CC13XXaffected 0 before 4.40.00
Texas Instruments / SimpleLink-CC26XXaffected 0 before 4.40.00
Texas Instruments / SimpleLink-CC32XXaffected 0 before 4.10.03

CWE

CWE-190

References

ADP enrichment

CVE

No English description supplied.