NetSight
high7.4

CVE-2021-27502

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can …

Impact

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

Affected products

VendorProductAffected versions
TiReal-Time Operating System
All versions
TiSimplelink Cc13xx Software Development Kit
before 4.40.00
TiSimplelink Cc26xx Software Development Kit
before 4.40.00
TiSimplelink Cc32xx Software Development Kit
before 4.10.03
TiSimplelink Msp432e401y
All versions
TiSimplelink Msp432e411y
All versions

Weakness classification

References