Priority LOW 34
Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code exec…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2023-11-21 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2023-11-21 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2023-11-20 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2023-11-20 · Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34
An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2021-05-07 · No fix listed CWE-190
Priority LOW 37
The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01209 · Published 2021-05-07 · No fix listed CWE-121
Priority MEDIUM 46
Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and pri…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01752 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 46
The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01752 · Published 2021-05-07 · No fix listed CWE-190
Priority LOW 34
The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and p…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01387 · Published 2021-05-07 · No fix listed CWE-190