Priority MEDIUM 62
An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials
CVSS 3.1MEDIUM 6.6· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2024-09-12 · No fix listed CWE-200
Priority MEDIUM 61
The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1012 · Published 2023-08-14 · No fix listed CWE-120
Priority MEDIUM 46
The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01752 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 46
Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and pri…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01752 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 43
Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0253 · Published 2019-11-13 · No fix listed CWE-120
Priority MEDIUM 43
Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.02872 · Published 2018-11-06 · No fix listed CWE-787
Priority LOW 38
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00965 · Published 2020-10-27 · No fix listed
Priority LOW 38
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipp…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00259 · Published 2020-08-31 · No fix listed CWE-347
Priority LOW 37
The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2023-10-19 · No fix listed CWE-121
Priority LOW 37
The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00139 · Published 2023-10-19 · No fix listed CWE-347
Priority LOW 37
The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01209 · Published 2021-05-07 · No fix listed CWE-121
Priority LOW 36
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01459 · Published 2020-10-27 · No fix listed
Priority LOW 36
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01459 · Published 2020-10-27 · No fix listed
Priority LOW 34
Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code exec…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2023-11-21 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2023-11-21 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2023-11-20 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2021-05-07 · No fix listed CWE-190
Priority LOW 34
The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and p…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01387 · Published 2021-05-07 · No fix listed CWE-190
Priority LOW 34
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2023-11-20 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 32
The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a deni…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01825 · Published 2020-02-10 · No fix listed CWE-120
Priority LOW 32
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic cu…
CVSS 3.1MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.00813 · Published 2018-08-07 · Partial fix · 10.13.6, 11.4 +1 CWE-325
Priority LOW 31
TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile.
CVSS 3.1MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.00689 · Published 2021-09-20 · No fix listed CWE-863
Priority LOW 30
The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict t…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00709 · Published 2020-02-10 · No fix listed
Priority LOW 29
The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (dead…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00508 · Published 2021-09-07 · No fix listed
Priority LOW 27
An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01384 · Published 2022-02-16 · No fix listed CWE-457
Load more