CVE-2021-27433

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbedkrbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

CVE-2021-27433

CVE-2021-27433 affects the ARM mbed-ualloc memory library (version 1.3.0). The root cause is an integer wrap-around in mbed_krbs, which can lead to arbitrary memory allocation and result in crash or remote code injection/execution. Public sources consistently describe this vulnerability and its i...