VYPR

FreeRTOS+FAT

by FreeRTOS

CVEs (3)

  • CVE-2021-27504Nov 21, 2023
    risk 0.00cvss epss 0.00

    Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.

  • CVE-2019-18178Nov 4, 2019
    risk 0.00cvss epss 0.01

    Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFREE, which (by default) is a macro definition of vPortFree(), but it is reused to flush modified file content from the…

  • CVE-2019-13120Oct 7, 2019
    risk 0.00cvss epss 0.01

    Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT…