PT-2021-4213 · Texas Instruments · Ti-Rtos

Published 2021-04-29 · Updated 2023-12-01 · CVE-2021-27429

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TI-RTOS (affected versions not specified)

Description The issue is related to an integer overflow vulnerability in the HeapTrack alloc function. This vulnerability can be triggered when extremely large values are passed, causing the function to return a valid pointer to a small buffer. As a result, it may lead to code execution. The vulnerability affects the SimpleLink series CC13XX, CC26XX, CC32XX, and MSP432E4 microcontrollers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2021-04816

CVE-2021-27429

Affected Products

Ti-Rtos

References · 9

• https://osv.dev/vulnerability/CVE-2021-27429 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27429 · Security Note
• https://bdu.fstec.ru/vul/2021-04816 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-119-04 · Note
• https://ti.com/lit/an/swra709/swra709.pdf?ts=1632841610387&ref_url=https%253A%252F%252Fwww.google.com%252F · Note
• https://ti.com/lit/an/swra709/swra709.pdf?ts=1632841610387&ref_url=https%253A%252F%252Fwww.google.com%252F · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04 · Note
• https://t.me/cvenotify/61933 · Telegram Post
• https://ti.com/tool/TI-RTOS-MCU · Note