Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at Norbert Wiener in the 21st Century, a virtual conference hosted by The IEEE Society on Social Implications of Technology SSIT, July 23-25, 2021. I’m speaking at DEFCON 29, August 5-8, 2021. Im speaking via Internet ...

[Security Nation] Jonathan Cran on demystifying startup funding for security companies

!\Security Nation\ Jonathan Cran on demystifying startup funding for security companieshttps://blog.rapid7.com/content/images/2021/07/securitynationlogo.jpg In this episode of Security Nation, we’re joined by Jonathan Cran. We wade into uncharted territory with Jonathan, as he claims the title of...

PT-2021-15169

Name of the Vulnerable Software and Affected Versions Texas Instruments SimpleLink Wi-Fi versions prior to MSP432E4 SDK: v4.20.00.12 Texas Instruments SimpleLink Wi-Fi CC32XX SDK versions prior to v4.30.00.06 Texas Instruments SimpleLink Wi-Fi CC13X0 SDK versions prior to v4.10.03 Texas Instrumen...

PT-2021-15167

Name of the Vulnerable Software and Affected Versions Texas Instruments SimpleLink Wi-Fi versions prior to MSP432E4 SDK: v4.20.00.12 Texas Instruments SimpleLink Wi-Fi versions prior to CC32XX SDK v4.30.00.06 Texas Instruments SimpleLink Wi-Fi versions prior to CC13X0 SDK v4.10.03 Texas Instrumen...

Microsoft Warns of 25 Critical Vulnerabilities in IoT, Industrial Devices

Security researchers at Microsoft are warning the industry about 25 as-yet undocumented critical memory-allocation vulnerabilities across a number of vendors’ IoT and industrial devices that threat actors could exploit to execute malicious code across a network or cause an entire system to crash...

Texas Instrument TI-RTOS Input Validation Error Vulnerability (CNVD-2021-36203)

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. Texas Instrument TI-RTOS has an input validation error vulnerability that originates from returning a valid pointer to a small buffer on a very larg...

Integer Overflow or Wrap Around Vulnerability in Multiple Texas Instruments Products (CNVD-2021-50138)

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Texas Instrument TI-RTOS Input Validation Error Vulnerability (CNVD-2021-36202)

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. An input validation error vulnerability exists in Texas Instrument TI-RTOS that originates from returning a valid pointer to a small buffer on a ver...

Buffer Overflow Vulnerability in Multiple Texas Instruments Products

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. A buffer overflow vulnerability in multiple Texas Instruments products can be exploited by an attacker to remotely execute code...

Texas Instrument TI-RTOS Input Validation Error Vulnerability

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. The Texas Instruments TI-RTOS-MCU has an input validation error vulnerability that originates from returning a valid pointer to a small buffer on a...

Integer Overflow or Wrap Around Vulnerability in Multiple Texas Instruments Products (CNVD-2021-50140)

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Texas Instrument TI-RTOS Input Validation Error Vulnerability (CNVD-2021-36201)

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. Texas Instrument TI-RTOS suffers from an input validation error vulnerability that stems from the fact that when configured to use the HeapMem heap...

Integer Overflow or Wrap Around Vulnerability in Multiple Texas Instruments Products

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products that originates from an integer overflow in the host MCU's api when attempting to connect to a WIFI...

Integer Overflow or Wrap Around Vulnerability in Multiple Texas Instruments Products (CNVD-2021-50139)

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

PT-2021-4213 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: TI-RTOS affected versions not specified Description: The issue is related to an integer overflow vulnerability in the HeapTrack alloc function. This vulnerability can be triggered when extremely large values are passed, causing the function t...

Texas Instruments SimpleLink

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Texas Instruments Equipment: SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 Vulnerabilities: Stack-based Buffer Overflow, Integer Overflow or Wraparound 2. RISK EVALUATION Successful...

Texas Instruments SimpleLink 缓冲区错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. A buffer overflow vulnerability in multiple Texas Instruments products can be exploited by an attacker to remotely execute code...

Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Texas Instruments TI-RTOS-MCU 输入验证错误漏洞

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. An input validation error vulnerability exists in Texas Instrument TI-RTOS that originates from returning a valid pointer to a small buffer on a ver...

PT-2021-4214 · Texas Instruments · Simplelink

Name of the Vulnerable Software and Affected Versions: Texas Instruments SimpleLink series CC13XX, CC26XX, CC32XX, and MSP432E4 affected versions not specified Description: The issue is caused by an integer overflow in the implementation of the malloc function in the FreeRTOS component of the...