CVE-2021-22636: Ti Real-Time Operating System

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

Affected products

• Ti Real-Time Operating System: affected versions not specified
• Ti Simplelink CC13XX Software Development Kit: before 4.40.00 (fixed in 4.40.00)
• Ti Simplelink CC26XX Software Development Kit: before 4.40.00 (fixed in 4.40.00)
• Ti Simplelink CC32XX Software Development Kit: before 4.10.03 (fixed in 4.10.03)
• Ti Simplelink MSP432E401Y: affected versions not specified
• Ti Simplelink MSP432E411Y: affected versions not specified

Published 2023-11-20. Last modified 2026-06-17.