CVE-2021-26706

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: Mem_PoolCreate, Mem_DynPoolCreate, and Mem_DynPoolCreateHW. Because these functions use multiplication to calculate the pool sizes, the operation may cause an integer overflow if the arguments are large enough. The resulting memory pool will be smaller than expected and may be exploited by an attacker.

Se ha detectado un problema en el archivo lib_mem.c en Micrium uC/OS uC/LIB versiones 1.38.x y 1.39.00. Las siguientes funciones de asignación de memoria no comprueban el desbordamiento de enteros cuando es asignado un pool cuyo tamaño excede el espacio de direcciones: Mem_PoolCreate, Mem_DynPoolCreate y Mem_DynPoolCreateHW. Dado que estas funciones usan la multiplicación para calcular el tamaño de los pools, la operación puede causar un desbordamiento de enteros si los argumentos son lo suficientemente grandes. El pool de memoria resultante será más pequeño de lo esperado y puede ser explotado por un atacante

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-02-05 CVE Reserved
2022-01-24 CVE Published
2024-08-03 CVE Updated
2024-10-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-190: Integer Overflow or Wraparound

CAPEC

References (3)

URL	Tag	Source
https://micrium.atlassian.net/wiki/spaces/libdoc138	Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://docs.silabs.com/micrium/latest/micrium-common	2022-02-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.00 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.00"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.01 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.01"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.02 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.02"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.03 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.03"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.04 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.04"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.38.05 Search vendor "Micrium" for product "Uc\/lib" and version "1.38.05"		-		Affected
Micrium Search vendor "Micrium"		Uc\/lib Search vendor "Micrium" for product "Uc\/lib"				1.39.00 Search vendor "Micrium" for product "Uc\/lib" and version "1.39.00"		-		Affected