Integer overflow

2023-11-2019:15:00

PRIOn knowledge base

www.prio-n.com

texas instruments

ti-rtos

heapmem

integer overflow

vulnerability

code execution

nvd

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%

JSON

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in ‘HeapMem_allocUnprotected’ and result in code execution.

CPENameOperatorVersion
simplelink_cc13xx_software_development_kitlt4.40.00
simplelink_cc26xx_software_development_kitlt4.40.00
simplelink_cc32xx_software_development_kitlt4.10.03

Name	Operator	Version
simplelink_cc13xx_software_development_kit	lt	4.40.00
simplelink_cc26xx_software_development_kit	lt	4.40.00
simplelink_cc32xx_software_development_kit	lt	4.10.03