Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4 and prior versions that stems from the fact that sending a malformed advertisement packet can cause a buffer overflow, which can lead to a denial of service or...

CVE-2021-27429

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

Integer overflow

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

Integer overflow

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

CVE-2021-22636 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

CVE-2021-22636

CVE-2021-22636 involves Texas Instruments TI-RTOS where, when using the HeapMem heap, malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Connected documents corroborate the T...

CVE-2021-27429

TI-RTOS (including TI-RTOS-MCU) is associated with CVE-2021-27429, which describes an integer overflow in HeapTrack_alloc that can return a pointer to a small buffer when extremely large values are processed. This can lead to code execution. Public sources in the connected data indicate TI-RTOS T...

CVE-2021-27429 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

PT-2023-7501 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions 6.2.1 and below Description: The issue is related to a memory overflow vulnerability in the Azure RTOS NetX Duo TCP/IP network stack, which can be exploited by an attacker to achieve remote code execution. The...

PT-2023-7500 · Microsoft · Azure Rtos Usbx

Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions prior to 6.3.0 Description: The issue is related to expired pointer dereference vulnerabilities in Azure RTOS USBX, which can lead to remote code execution. The affected components include functions and processes in t...

Weston Embedded uC-HTTP HTTP Server memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1732 Weston Embedded uC-HTTP HTTP Server memory corruption vulnerability November 14, 2023 CVE Number CVE-2023-28391 SUMMARY A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Speciall...

Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1725 Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability November 14, 2023 CVE Number CVE-2023-24585 SUMMARY An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafte...

The vulnerability of the Azure RTOS GUIX Studio development environment, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure RTOS GUIX Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

Remote code execution

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2023-36418

CVE-2023-36418 affects Microsoft Azure RTOS GUIX Studio and GUIX Studio Installer Application. A remote code execution vulnerability is reported, with CVSSv3.1 base score 7.8 (LOCAL attack vector, low complexity, user interaction required, no privileges needed; impacts on confidentiality, integri...

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...