Browse CVEs

MEDIUM 5.5 CVE-2024-41629 An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storag… Fusion Digital Power Designer Mitigation only Fix from $1,6002024-09-12 HIGH 7.8 CVE-2021-27502 Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values… Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-21 HIGH 7.8 CVE-2021-22636 Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, … Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-20 HIGH 7.8 CVE-2021-27429 Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in … Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-20 HIGH 8.8 CVE-2022-25333 The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a mo… Omap L138 Firmware Mitigation only Fix from $1,9502023-10-19 HIGH 8.8 CVE-2022-25334 The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD… Omap L138 Firmware Mitigation only Fix from $1,9502023-10-19 CRITICAL 9.8 CVE-2023-29468EPSS 11% The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_I… Wilink8 Wifi Mcp8 8.5+ Fix from $2,3002023-08-14 MEDIUM 5.3 CVE-2021-21966 An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.… Simplelink Cc32xx Software Development Kit 1.0.1.15-2.15.0.1 / 5.30.00.08+ Fix from $1,6002022-02-16 MEDIUM 6.8 CVE-2020-16630 TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just W… 15.4 Stack No fix yet Fix from $1,6002021-09-20 MEDIUM 6.5 CVE-2021-34149 The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets,… Cc256xcqfn Em Firmware Mitigation only Fix from $1,6002021-09-07 HIGH 7.8 CVE-2021-22677 An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condi… Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $1,9502021-05-07 CRITICAL 9.8 CVE-2021-22671 Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-… Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $2,3002021-05-07 HIGH 8.0 CVE-2021-22673 The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow… Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $1,9502021-05-07 CRITICAL 9.8 CVE-2021-22679 The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the … Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $2,3002021-05-07 HIGH 7.2 CVE-2021-22675 The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to rem… Cc3100 Software Development Kit 4.10.03 / 4.40.00+ Fix from $1,9502021-05-07 MEDIUM 5.3 CVE-2021-3285 jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS. Code Composer Studio Intgrated Development Environment 10.1.1+ Fix from $1,6002021-01-26 HIGH 8.2 CVE-2020-27890 The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Respons… Z Stack Mitigation only Fix from $1,9502020-10-27 HIGH 7.5 CVE-2020-27891 The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuratio… Z Stack Mitigation only Fix from $1,9502020-10-27 HIGH 7.5 CVE-2020-27892 The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received … Z Stack Mitigation only Fix from $1,9502020-10-27 HIGH 8.8 CVE-2020-13593 The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows th… Simplelink Cc2640r2 Software Development Kit after 2.2.3 Fix from $1,9502020-08-31 MEDIUM 6.5 CVE-2019-19193 The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before… Ble Stack after 3.30.00.20 Fix from $1,6002020-02-10 MEDIUM 6.5 CVE-2019-17520 The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key… Cc2640r2 Software Development Kit after 3.30.00.20 Fix from $1,6002020-02-10 HIGH 8.8 CVE-2019-15948 Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer ove… Cc256xc Bt Sp Firmware after 4.4 Fix from $1,9502019-11-13 HIGH 8.8 CVE-2018-16986 Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet … Ble Stack after 2.3.3 Fix from $1,9502018-11-06 MEDIUM 6.8 CVE-2018-5383 Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android version… Wl18xx Bluetooth Service Pack 4.3 / 10.13+ Fix from $1,6002018-08-07