Lucene search
HistoryNov 20, 2023 - 7:15 p.m.
CVE-2021-27429
texas instruments
ti-rtos
integer overflow
vulnerability
heaptrack_alloc
code execution
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.5%
Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in ‘HeapTrack_alloc’ and result in code execution.
Affected configurations
Node
tireal-time_operating_systemMatch-
ticc3200Match-
ORticc3220rMatch-
ORticc3220sMatch-
ORticc3220sfMatch-
ORticc3230sMatch-
ORticc3230sfMatch-
ORticc3235sMatch-
ORticc3235sfMatch-
Node
tisimplelink_cc13xx_software_development_kitRange<4.40.00
ORtisimplelink_cc26xx_software_development_kitRange<4.40.00
ORtisimplelink_cc32xx_software_development_kitRange<4.10.03
ORtisimplelink_msp432e401yMatch-
ORtisimplelink_msp432e411yMatch-
Related
prion
prion
Integer overflow
2023-11-20 19:15:00
cvelist
cvelist
CVE-2021-27429 Texas Instruments TI-RTOS Integer Overflow or Wraparound
2023-11-20 19:00:19
cve
cve
CVE-2021-27429
2023-11-20 19:15:08
ics
ics
Multiple RTOS (Update E)
2022-04-19 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.5%
Related for NVD:CVE-2021-27429