Skip to content
OpenAdvisories
Unscored CVE-2021-26461 EUVD-2021-13266GHSA-h737-8f7x-38jh

malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds

Published Jun 21, 2021 · Updated Aug 3, 2024 · Assigned by apache

Description

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache NuttX Apache NuttX – < 10.1.0 10.1.0

Advisories 1

References