Texas Instruments devices running FREERTOS, malloc returns a valid
pointer to a small buffer on extremely large values, which can trigger
an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in
code execution.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 | Third Party Advisory US Government Resource |
| https://www.ti.com/tool/TI-RTOS-MCU | Product |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
01 Dec 2023, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 - Third Party Advisory, US Government Resource | |
| References | () https://www.ti.com/tool/TI-RTOS-MCU - Product | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:ti:simplelink_msp432e401y:-:*:*:*:*:*:*:* cpe:2.3:a:ti:simplelink_cc32xx_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:a:ti:simplelink_cc13xx_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:o:amazon:freertos:10.4.1:*:*:*:*:*:*:* cpe:2.3:a:ti:simplelink_msp432e411y:-:*:*:*:*:*:*:* cpe:2.3:a:ti:simplelink_cc26xx_software_development_kit:*:*:*:*:*:*:*:* |
|
| CWE | CWE-190 | |
| First Time |
Amazon
Ti Ti simplelink Msp432e401y Ti simplelink Msp432e411y Amazon freertos Ti simplelink Cc13xx Software Development Kit Ti simplelink Cc26xx Software Development Kit Ti simplelink Cc32xx Software Development Kit |
21 Nov 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-21 18:15
Updated : 2023-12-10 15:26
NVD link : CVE-2021-27504
Mitre link : CVE-2021-27504
CVE.ORG link : CVE-2021-27504
JSON object : View
Products Affected
ti
- simplelink_cc13xx_software_development_kit
- simplelink_cc26xx_software_development_kit
- simplelink_msp432e411y
- simplelink_msp432e401y
- simplelink_cc32xx_software_development_kit
amazon
- freertos
CWE
CWE-190
Integer Overflow or Wraparound