Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-27433

Опубликовано: 03 мая 2022
Источник: nvd
CVSS3: 7.3
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:arm:mbed_ualloc:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.03779
Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 9.8
github
почти 4 года назад

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

EPSS

Процентиль: 88%
0.03779
Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190
CWE-190