Description
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Texas Instruments | CC32XX | < 4.40.00.07 | 4.40.00.07 |
| Texas Instruments | SimpleLink MSP432E4XX | all versions | — |
| Texas Instruments | SimpleLink-CC13XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC26XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC32XX | < 4.10.03 | 4.10.03 |
Advisories 1
- ICSA-21-119-04 Multiple RTOS (Update E) CISA ICS & IT advisories · Apr 19, 2022