Back to Database
Status published
High
CVE-2021-27504
Texas Instruments FREERTOS Integer Overflow or Wraparound
Vulnerability Description
Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-27504
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- David Atch, Omri Ben Bassat, and Tamir Ariel from Microsoft Section 52, and the Azure Defender for IoT research group reported these vulnerabilities to CISA.
References
More from Texas Instruments
View All →CVE-2022-25334
Stack overflow on SK_LOAD signature length field in Texas Instruments OMAP L138
High
8.2
CVE-2022-25333
Flawed SK_LOAD module authenticity check in Texas Instruments OMAP L138
High
8.2
CVE-2022-25332
SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138
Medium
4.4
CVE-2021-27502
Texas Instruments TI-RTOS Integer Overflow or Wraparound
High
7.4
CVE-2021-27429
Texas Instruments TI-RTOS Integer Overflow or Wraparound
High
7.4
Affected Vendor
Texas Instruments
View all reports →Affected Software
CC32XX, SimpleLink MSP432E4XX, SimpleLink-CC13XX, SimpleLink-CC26XX, SimpleLink-CC32XX
Vulnerable Versions:
0, all versions
Timeline
Official Publish:
November 21st, 2023
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H