VYPR
← All advisories
High severity7.3NVD Advisory· Published May 3, 2022· Updated Jun 17, 2026

CVE-2021-27431

CVE-2021-27431

Description

ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution.

Affected products

3
  • Arm/Cmsis Rtos
    cpe:2.3:o:arm:cmsis-rtos:*:*:*:*:*:*:*:*
    Range: <=2.1.3
  • Arm/CMSIS RTOS2llm-fuzzy2 versions
    <2.1.3+ 1 more
    • (no CPE)range: <2.1.3
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.