CVE-2021-27411

Name of the Vulnerable Software and Affected Versions Micrium OS versions 5.10.1 and prior

Description The issue is related to integer wrap-around in functions Mem DynPoolCreate, Mem DynPoolCreateHW, and Mem PoolCreate. This can lead to unverified memory assignment, resulting in arbitrary memory allocation and unexpected behavior, such as allocating very small blocks of memory instead of very large ones.

Recommendations For Micrium OS versions 5.10.1 and prior, consider disabling the functions Mem DynPoolCreate, Mem DynPoolCreateHW, and Mem PoolCreate until a patch is available to prevent arbitrary memory allocation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.