Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2021-22636

Texas Instruments TI-RTOS Integer Overflow or Wraparound

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Texas Instruments CC32XX

Default version status: unaffected

  • 0 to < 4.40.00.07affected

Texas Instruments SimpleLink MSP432E4XX

Default version status: unaffected

  • all versionsaffected

Texas Instruments SimpleLink-CC13XX

Default version status: unaffected

  • 0 to < 4.40.00affected

Texas Instruments SimpleLink-CC26XX

Default version status: unaffected

  • 0 to < 4.40.00affected

Texas Instruments SimpleLink-CC32XX

Default version status: unaffected

  • 0 to < 4.10.03affected

References