https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-27504.htmlhttps://patchthecve.com/cve/CVE-2021-27504.htmlWed, 17 Jun 2026 03:44:59 +0000HIGH 7.4: Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.https://patchthecve.com/cve/CVE-2021-27502.htmlhttps://patchthecve.com/cve/CVE-2021-27502.htmlWed, 17 Jun 2026 03:44:59 +0000HIGH 7.4: Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.https://patchthecve.com/cve/CVE-2021-27429.htmlhttps://patchthecve.com/cve/CVE-2021-27429.htmlWed, 17 Jun 2026 03:44:50 +0000HIGH 7.4: Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution. https://patchthecve.com/cve/CVE-2021-22636.htmlhttps://patchthecve.com/cve/CVE-2021-22636.htmlWed, 17 Jun 2026 03:37:27 +0000HIGH 7.4: Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution. https://patchthecve.com/cve/CVE-2022-25334.htmlhttps://patchthecve.com/cve/CVE-2022-25334.htmlWed, 17 Jun 2026 04:33:24 +0000HIGH 8.2: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stack overflow, affecting secure kernel data https://patchthecve.com/cve/CVE-2022-25333.htmlhttps://patchthecve.com/cve/CVE-2022-25333.htmlWed, 17 Jun 2026 04:33:24 +0000HIGH 8.2: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validated. An adversary can re-use any correctly signed header and aphttps://patchthecve.com/cve/CVE-2022-25332.htmlhttps://patchthecve.com/cve/CVE-2022-25332.htmlWed, 17 Jun 2026 04:33:24 +0000MEDIUM 4.4: The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managing cache contents and collecting timing information for different ciphertext inpuhttps://patchthecve.com/cve/CVE-2023-29468.htmlhttps://patchthecve.com/cve/CVE-2023-29468.htmlWed, 17 Jun 2026 05:50:07 +0000CRITICAL 9.8: The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote cod