Ti Simplelink Cc26xx Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Ti Simplelink Cc26xx Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2021-22671 — CVSS 9.8 (critical): Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the…
• CVE-2021-22679 — CVSS 9.8 (critical): The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute…
• CVE-2021-22673 — CVSS 8.0 (high): The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which…
• CVE-2021-22677 — CVSS 7.8 (high): An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a…
• CVE-2021-27504 — CVSS 7.4 (high): Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger…
• CVE-2021-22636 — CVSS 7.4 (high): Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely…
• CVE-2021-27429 — CVSS 7.4 (high): Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow…
• CVE-2021-27502 — CVSS 7.4 (high): Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely…
• CVE-2021-22675 — CVSS 7.2 (high): The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an…