Description
Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Texas Instruments | CC32XX | < 4.40.00.07 | 4.40.00.07 |
| Texas Instruments | SimpleLink MSP432E4XX | all versions | — |
| Texas Instruments | SimpleLink-CC13XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC26XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC32XX | < 4.10.03 | 4.10.03 |
Advisories 1
- ICSA-21-119-04 Multiple RTOS (Update E) CISA ICS & IT advisories · Apr 19, 2022