Description
Texas Instruments devices running FREERTOS, malloc returns a valid
pointer to a small buffer on extremely large values, which can trigger
an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in
code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Texas Instruments | CC32XX | < 4.40.00.07 | 4.40.00.07 |
| Texas Instruments | SimpleLink MSP432E4XX | all versions | — |
| Texas Instruments | SimpleLink-CC13XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC26XX | < 4.40.00 | 4.40.00 |
| Texas Instruments | SimpleLink-CC32XX | < 4.10.03 | 4.10.03 |
Advisories 2
- SCA-2024-0004 Third party vulnerabilities in SICK CDE-100 SICK PSIRT · Nov 7, 2024
- ICSA-21-119-04 Multiple RTOS (Update E) CISA ICS & IT advisories · Apr 19, 2022