CVE-2021-26461

2021-06-2117:15:09

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

CPENameOperatorVersion
incubator-nuttxeqnuttx-5.10
incubator-nuttxeqnuttx-7.27
incubator-nuttxeqnuttx-3.1
incubator-nuttxeqnuttx-5.15
incubator-nuttxeqnuttx-5.3
incubator-nuttxeqnuttx-7.15
incubator-nuttxeqnuttx-7.17
incubator-nuttxeqnuttx-5.1
incubator-nuttxeqnuttx-3.8
incubator-nuttxeqnuttx-7.31

Name	Operator	Version
incubator-nuttx	eq	nuttx-5.10
incubator-nuttx	eq	nuttx-7.27
incubator-nuttx	eq	nuttx-3.1
incubator-nuttx	eq	nuttx-5.15
incubator-nuttx	eq	nuttx-5.3
incubator-nuttx	eq	nuttx-7.15
incubator-nuttx	eq	nuttx-7.17
incubator-nuttx	eq	nuttx-5.1
incubator-nuttx	eq	nuttx-3.8
incubator-nuttx	eq	nuttx-7.31