CveMateVulnerability intelligence

Ti vulnerabilities

28 vulnerabilities

Known vulnerabilities in Ti products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 33 products.

Products

33

Simplelink Cc32Xx Software Development Kit10 vulnerabilities
Simplelink Cc26Xx Software Development Kit9 vulnerabilities
Cc3100 Software Development Kit5 vulnerabilities
Cc3200 Software Development Kit5 vulnerabilities
Simplelink Cc13X0 Software Development Kit5 vulnerabilities
Simplelink Cc13X2 Software Development Kit5 vulnerabilities
Simplelink Msp432E4 Software Development Kit5 vulnerabilities
Real Time Operating System4 vulnerabilities
Simplelink Cc13Xx Software Development Kit4 vulnerabilities
Simplelink Msp432E401Y4 vulnerabilities
Simplelink Msp432E411Y4 vulnerabilities
Z Stack4 vulnerabilities
Omap L1383 vulnerabilities
Ble Stack2 vulnerabilities
Cc2640R2 Software Development Kit2 vulnerabilities
15.4 Stack1 vulnerabilities
Ble5 Stack1 vulnerabilities
Cc256Xb Bt Sp1 vulnerabilities
Cc256Xc Bt Sp1 vulnerabilities
Cc256Xcqfn Em1 vulnerabilities
Cc31001 vulnerabilities
Cc32001 vulnerabilities
Code Composer Studio Intgrated Development Environment1 vulnerabilities
Dynamic Multi Protocal Manager1 vulnerabilities
Easylink1 vulnerabilities
Fusion Digital Power Designer1 vulnerabilities
Openthread1 vulnerabilities
Simplelink Cc2640R2 Software Development Kit1 vulnerabilities
Tm4C1231 vulnerabilities
Tm4C1291 vulnerabilities
Wilink8 Wifi Mcp81 vulnerabilities
Wl18Xx Bluetooth Service Pack1 vulnerabilities
Wl18Xx Bt Sp1 vulnerabilities

CVE-2018-16986tible-stack7y ago06-11-2018 16:00

Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.CVE-2018-18056titm4c123_firmware+17y ago20-08-2019 16:22

An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash memory. As a consequence, it is possible to execute single instructions with arbitrary system states (e.g., registers, status flags, and SRAM content) and observe the state changes produced by the unknown instruction. An attacker could exploit this vulnerability by executing protected and unknown instructions with specific system states and observing the state changes. Based on the gathered information, it is possible to reverse-engineer the executed instructions. The processor acts as a kind of "instruction oracle."CVE-2018-5383android open source projectandroid+598y ago07-08-2018 21:00

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.CVE-2021-21966ticc3100_firmware+24y ago16-02-2022 16:38

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.CVE-2021-27502texas instrumentscc32xx+102y ago21-11-2023 17:41

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.CVE-2021-27429texas instrumentscc32xx+102y ago20-11-2023 19:00

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution.CVE-2021-27504amazonfreertos+102y ago21-11-2023 17:43

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.CVE-2021-22679ticc3100_software_development_kit+65y ago07-05-2021 12:46

The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).CVE-2021-22673ticc3100_software_development_kit+65y ago07-05-2021 13:21

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).CVE-2021-22677ticc3100_software_development_kit+65y ago07-05-2021 15:11

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).CVE-2021-22636texas instrumentscc32xx+102y ago20-11-2023 19:02

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.CVE-2021-22675ticc3100_software_development_kit+65y ago07-05-2021 12:01

The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely execute code on SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).CVE-2021-22671ticc3100_software_development_kit+65y ago07-05-2021 13:12

Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK versions prior to v4.40.00, CC3200 SDK v1.5.0 and prior, CC3100 SDK v1.3.0 and prior).CVE-2021-3285ticode_composer_studio_intgrated_development_environment5y ago23-01-2021 01:02

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS.CVE-2021-34149ticc256xcqfn-em_firmware5y ago07-09-2021 06:16

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.CVE-2020-16630ti15.4-stack+65y ago20-09-2021 19:20

TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Comparison or OOB. Assume that a victim mobile uses secure pairing to pair with a victim BLE device based on TI chips and generate an authenticated-and-MITM-protection LTK. If a fake mobile with the victim mobile’s MAC address uses Just Works and pairs with the victim device, the generated LTK still has the property of authenticated-and-MITM-protection. Therefore, the fake mobile can access attributes with the authenticated read/write permission.CVE-2020-13593tisimplelink-cc2640r2_software_development_kit6y ago31-08-2020 14:54

The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radio range can achieve arbitrary read/write access to protected GATT service data, cause a denial of service, or possibly control a device's function by establishing an encrypted session with an unauthenticated Long Term Key (LTK).CVE-2020-27890tiz-stack5y ago27-10-2020 20:26

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value.CVE-2020-27891tiz-stack5y ago27-10-2020 20:26

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal().CVE-2020-27892tiz-stack5y ago27-10-2020 20:25

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd().