CVE-2021-27439: Integer Overflow or Wraparound

TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tosmmheapalloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code...

The vulnerability of the tos_mmheap_alloc function in the real-time operating system TencentOS allows a hacker to execute arbitrary code.

The vulnerability of the tosmmheapalloc function in the real-time operating system TencentOS is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...