Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Priority LOW 34

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code exec…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-21 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-21 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00276 Published 2023-11-20 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00276 Published 2023-11-20 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2021-05-07 No fix listed CWE-190
Priority LOW 37

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01209 Published 2021-05-07 No fix listed CWE-121
Priority MEDIUM 46

Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and pri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 46

The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2021-05-07 No fix listed CWE-190
Priority LOW 34

The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and p…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01387 Published 2021-05-07 No fix listed CWE-190