NetSight
high7.4

CVE-2021-27504

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow v…

Impact

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

Affected products

VendorProductAffected versions
AmazonFreertos
Version 10.4.1
TiSimplelink Cc13xx Software Development Kit
before 4.40.00
TiSimplelink Cc26xx Software Development Kit
before 4.40.00
TiSimplelink Cc32xx Software Development Kit
before 4.10.03
TiSimplelink Msp432e401y
All versions
TiSimplelink Msp432e411y
All versions

Weakness classification

References