Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2021-27417

eCosCentric eCosPro RTOS Integer Overflow or Wraparound

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

eCosCentric eCosPro RTOS

  • 2.0.1 to ≤ 4.5.3affected

References