Vulnerability · Published Jun 21, 2021 · Assigned by apache
CVE-2021-26461malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds
Critical 9.8
In plain English
A critical-severity integer overflow in Apache NuttX from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.0% (higher than 92% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)5.0%top 7.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache NuttX | Apache NuttX – before 10.1.0 |
Weakness: CWE-190