« Volver al listado

CVE-2021-27504

Estado: ModificadaAlta (7.8)—

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Amazon — FreertosTI — Simplelink Cc13xx Software Development KITTI — Simplelink Cc26xx Software Development KITTI — Simplelink Cc32xx Software Development KITTI — Simplelink Msp432e401yTI — Simplelink Msp432e411y

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-27504",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "ics-cert@hq.dhs.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.4,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.4
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "Texas Instruments",
          "product": "CC32XX",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.40.00.07",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Texas Instruments",
          "product": "SimpleLink MSP432E4XX",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Texas Instruments",
          "product": "SimpleLink-CC13XX",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.40.00",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Texas Instruments",
          "product": "SimpleLink-CC26XX",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.40.00",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Texas Instruments",
          "product": "SimpleLink-CC32XX",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.10.03",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-11-21T18:15:07.713",
  "references": [
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://www.ti.com/tool/TI-RTOS-MCU",
      "tags": [
        "Product"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.ti.com/tool/TI-RTOS-MCU",
      "tags": [
        "Product"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Texas Instruments devices running FREERTOS, malloc returns a valid \npointer to a small buffer on extremely large values, which can trigger \nan integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in\n code execution."
    },
    {
      "lang": "es",
      "value": "En los dispositivos de Texas Instruments que ejecutan FREERTOS, malloc devuelve un puntero válido a un pequeño búfer en valores extremadamente grandes, lo que puede desencadenar una vulnerabilidad de desbordamiento de enteros en 'malloc' para FreeRTOS, lo que resulta en la ejecución de código."
    }
  ],
  "lastModified": "2026-06-17T03:44:59.673",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:amazon:freertos:10.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F471FD19-638D-46A4-A68D-C4BDA7FA26EE"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ti:simplelink_cc13xx_software_development_kit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97B4CA27-1024-4347-8C0B-A8848950CB5B",
              "versionEndExcluding": "4.40.00"
            },
            {
              "criteria": "cpe:2.3:a:ti:simplelink_cc26xx_software_development_kit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCC0C102-7DCB-4959-91C6-ECA8429BB1A2",
              "versionEndExcluding": "4.40.00"
            },
            {
              "criteria": "cpe:2.3:a:ti:simplelink_cc32xx_software_development_kit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61CF4AB1-347E-42F9-89FB-350445ED7E70",
              "versionEndExcluding": "4.10.03"
            },
            {
              "criteria": "cpe:2.3:a:ti:simplelink_msp432e401y:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "538BC9EE-7C51-41CC-9A58-5FEB3261EF7C"
            },
            {
              "criteria": "cpe:2.3:a:ti:simplelink_msp432e411y:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC7C493D-DAC1-4FBD-A056-C9D5CF98F9E0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}