Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Real\-Time_operating_system
(Ti)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 4 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2021-09-20 | CVE-2020-16630 | TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Comparison or OOB. Assume that a victim mobile uses secure pairing to pair with a victim BLE device based on TI chips and generate an authenticated-and-MITM-protection LTK. If a fake mobile with the victim mobile’s MAC address uses Just Works and pairs with the... | 15\.4\-Stack, Ble5\-Stack, Dynamic_multi\-Protocal_manager, Easylink, Openthread, Real\-Time_operating_system, Z\-Stack | 6.8 | ||
2023-11-21 | CVE-2021-27502 | Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution. | Real\-Time_operating_system, Simplelink_cc13xx_software_development_kit, Simplelink_cc26xx_software_development_kit, Simplelink_cc32xx_software_development_kit, Simplelink_msp432e401y, Simplelink_msp432e411y | 7.8 | ||
2023-11-20 | CVE-2021-22636 | Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution. | Real\-Time_operating_system, Simplelink_cc13xx_software_development_kit, Simplelink_cc26xx_software_development_kit, Simplelink_cc32xx_software_development_kit, Simplelink_msp432e401y, Simplelink_msp432e411y | 7.8 | ||
2023-11-20 | CVE-2021-27429 | Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution. | Real\-Time_operating_system, Simplelink_cc13xx_software_development_kit, Simplelink_cc26xx_software_development_kit, Simplelink_cc32xx_software_development_kit, Simplelink_msp432e401y, Simplelink_msp432e411y | 7.8 |