Ti
28 CVEs across 59 Ti products. Browse Ti vulnerabilities, severities, and proof-of-concept exploits.
Ti products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41629 | Medium | 5.5 | 2024-09-12 | An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of crede… |
CVE-2021-27504 | High | 7.4 | 2023-11-21 | Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow… |
CVE-2021-27502 | High | 7.4 | 2023-11-21 | Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which ca… |
CVE-2021-27429 | High | 7.4 | 2023-11-20 | Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrac… |
CVE-2021-22636 | High | 7.4 | 2023-11-20 | Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, whi… |
CVE-2022-25334 | High | 8.2 | 2023-10-19 | The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module lo… |
CVE-2022-25333 | High | 8.2 | 2023-10-19 | The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module throu… |
CVE-2022-25332 | Medium | 4.4 | 2023-10-19 | The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by… |
CVE-2023-29468 | Critical | 9.8 | 2023-08-14 | The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can… |
CVE-2021-21966 | Medium | 5.3 | 2022-02-16 | An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A speci… |
CVE-2020-16630 | Medium | 6.8 | 2021-09-20 | TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an… |
CVE-2021-34149 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing… |
CVE-2021-22677 | High | 7.8 | 2021-05-07 | An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or co… |
CVE-2021-22673 | High | 8.0 | 2021-05-07 | The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attack… |
CVE-2021-22671 | Critical | 9.8 | 2021-05-07 | Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi (MSP432… |
CVE-2021-22679 | Critical | 9.8 | 2021-05-07 | The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink… |
CVE-2021-22675 | High | 7.2 | 2021-05-07 | The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attacker to remotely exec… |
CVE-2021-3285 | Medium | 5.3 | 2021-01-26 | jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS. |
CVE-2020-27892 | High | 7.5 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response m… |
CVE-2020-27891 | High | 7.5 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response… |
CVE-2020-27890 | High | 8.2 | 2020-10-27 | The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message… |
CVE-2020-13593 | High | 8.8 | 2020-08-31 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-H… |
CVE-2019-19193 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 f… |
CVE-2019-17520 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on… |
CVE-2019-15948 | High | 8.8 | 2019-11-13 | Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via… |
CVE-2018-18056 | Medium | 4.6 | 2019-08-20 | An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents c… |
CVE-2018-16986 | High | 8.8 | 2018-11-06 | Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that trigg… |
CVE-2018-5383 | Medium | 6.8 | 2018-08-07 | Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before t… |