Non évaluée

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation...

CVE-2021-27433 Première détection SecPulse May 4, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory cisa.gov
patch github.com

Faits clés

Gravité: Non évaluée
Publication: May 4, 2022
Première détection SecPulse: May 4, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54