CVE-2021-26461 malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds
Integer wrap-arounds in memory allocation functions allow attackers to cause crashes or execute arbitrary code in NuttX RTOS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-26461?
CVE-2021-26461 is a critical vulnerability in Apache NuttX, published on 21 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
Weakness: CWE-190
Which versions are affected by CVE-2021-26461?
It affects 1 product.
Products include Apache Nuttx.
How do I fix CVE-2021-26461?
No fix has been published for CVE-2021-26461 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-26461 being exploited?
There is no known exploitation of CVE-2021-26461 in the wild and no public exploit code.
Other vulnerabilities in Apache NuttX
- CVE-2025-47868 Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.
- CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.
- CVE-2025-35003 Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.
- CVE-2020-17529 Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header
- CVE-2020-1939 Null dereference in Apache NuttX (incubating)
Sources
Also known as GHSA-h737-8f7x-38jh.