Skip to content
OpenAdvisories

Vendor

Texas Instruments

7 known vulnerabilities.

6 results · Clear filters · Feed

  • High 7.4

    Texas Instruments FREERTOS Integer Overflow or Wraparound

    Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

  • High 7.4

    Texas Instruments TI-RTOS Integer Overflow or Wraparound

    Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

  • High 7.4

    Texas Instruments TI-RTOS Integer Overflow or Wraparound

    Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

  • High 7.4

    Texas Instruments TI-RTOS Integer Overflow or Wraparound

    Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution.

  • High 8.2

    Stack overflow on SK_LOAD signature length field in Texas Instruments OMAP L138

    The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stac…

  • High 8.2

    Flawed SK_LOAD module authenticity check in Texas Instruments OMAP L138

    The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validated. An adversary can …