CVE-2021-27411

6.5 mediumEPSS 0.9%

Medium (6.5) in silabs micrium os. EPSS 0.9% chance of exploitation in the next 30 days.

Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as very small blocks of memory being allocated instead of very large ones.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2022-05-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

silabs:micrium_os

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
https://www.silabs.com/developers/micrium-os
https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
https://www.silabs.com/developers/micrium-os

Check your stack JSON