CVE-2021-27504
Texas Instruments FREERTOS Integer Overflow or Wraparound
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.40.00.07, 4.40.00, 4.10.03
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.
Timeline
- CVE published
- Record last updated
Affected versions
- Texas Instruments CC32XX
fixed in 4.40.00.07
- Texas Instruments SimpleLink MSP432E4XX
All versions
- Texas Instruments SimpleLink-CC13XX
fixed in 4.40.00
- Texas Instruments SimpleLink-CC26XX
fixed in 4.40.00
- Texas Instruments SimpleLink-CC32XX
fixed in 4.10.03