Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2021-27504

Texas Instruments FREERTOS Integer Overflow or Wraparound

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Texas Instruments CC32XX

Default version status: unaffected

  • 0 to < 4.40.00.07affected

Texas Instruments SimpleLink MSP432E4XX

Default version status: unaffected

  • all versionsaffected

Texas Instruments SimpleLink-CC13XX

Default version status: unaffected

  • 0 to < 4.40.00affected

Texas Instruments SimpleLink-CC26XX

Default version status: unaffected

  • 0 to < 4.40.00affected

Texas Instruments SimpleLink-CC32XX

Default version status: unaffected

  • 0 to < 4.10.03affected

References