RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
References
Link | Resource |
---|---|
https://github.com/RIOT-OS/RIOT | Product Third Party Advisory |
https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2022-05-03 14:15
Updated : 2022-05-12 09:29
NVD link : CVE-2021-27427
Mitre link : CVE-2021-27427
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Products Affected
riot-os
- riot