CVE-2021-27411 Micrium OS Integer Overflow or Wraparound
Integer overflow in Micrium OS memory pool creation functions can cause unexpected memory allocation behavior, potentially leading to system instability or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-27411?
CVE-2021-27411 is a medium-severity vulnerability in Micrium OS, published on 3 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as very small blocks of memory being allocated instead of very large ones.
Weakness: CWE-190
Which versions are affected by CVE-2021-27411?
It affects 1 product.
Products include Silabs Micrium Os.
How do I fix CVE-2021-27411?
No fix has been published for CVE-2021-27411 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-27411 being exploited?
There is no known exploitation of CVE-2021-27411 in the wild and no public exploit code.
Sources
Also known as GHSA-823g-7fp8-5vqm.