Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

28 records

Priority LOW 34

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code exec…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-21 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-21 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00276 Published 2023-11-20 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 34

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00276 Published 2023-11-20 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 21

The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managin…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00104 Published 2023-10-19 No fix listed CWE-208
Priority LOW 37

The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00206 Published 2023-10-19 No fix listed CWE-121
Priority LOW 37

The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00139 Published 2023-10-19 No fix listed CWE-347
Priority LOW 27

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01384 Published 2022-02-16 No fix listed CWE-457
Priority LOW 29

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (dead…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00508 Published 2021-09-07 No fix listed
Priority LOW 34

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00299 Published 2021-05-07 No fix listed CWE-190
Priority LOW 37

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01209 Published 2021-05-07 No fix listed CWE-121
Priority MEDIUM 46

Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and pri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 46

The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2021-05-07 No fix listed CWE-190
Priority LOW 34

The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and p…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01387 Published 2021-05-07 No fix listed CWE-190
Priority LOW 38

The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipp…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00259 Published 2020-08-31 No fix listed CWE-347
Priority LOW 30

The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict t…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00709 Published 2020-02-10 No fix listed
Priority LOW 32

The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a deni…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01825 Published 2020-02-10 No fix listed CWE-120
Priority MEDIUM 43

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0253 Published 2019-11-13 No fix listed CWE-120
Load more