CVE-2021-27502

CVE-2021-27502 affects Texas Instruments TI-RTOS when using the HeapMem heap (default). The issue: malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Multiple Red Hat/NVD ent...

CVE-2020-16630

The CVE-2020-16630 entry concerns TI’s BLE stack, where the Long-Term Key (LTK) property is cached and reused for bonded devices. A LTK can be unauthenticated (Just Works) or authenticated (Passkey Entry, Numeric Comparison, or OOB). If a victim mobile securely paired with a TI BLE device generat...

CVE-2021-22636

CVE-2021-22636 involves Texas Instruments TI-RTOS where, when using the HeapMem heap, malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Connected documents corroborate the T...

CVE-2021-27429

TI-RTOS (including TI-RTOS-MCU) is associated with CVE-2021-27429, which describes an integer overflow in HeapTrack_alloc that can return a pointer to a small buffer when extremely large values are processed. This can lead to code execution. Public sources in the connected data indicate TI-RTOS T...