https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:19:04.771262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-639 certfr-2021-avi-639 — De multiples vulnérabilités ont été découvertes dans les systèmes d'exploitation temps réel (*RTOS, Real Time OS*). Ell… 2026-10-03T22:19:04.887787+00:00 certfr-2021-avi-639 https://cve.radiocsirt.org/vuln/euvd-2026-47472 EUVD-2026-47472 2026-10-03T22:19:04.887833+00:00 EUVD-2026-47472 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35198 fkie_cve-2020-35198 2026-10-03T22:19:04.887848+00:00

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

 https://cve.radiocsirt.org/vuln/ghsa-jv4r-hc9x-r99x GHSA-jv4r-hc9x-r99x 2026-10-03T22:19:04.887878+00:00

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

 https://cve.radiocsirt.org/vuln/gsd-2020-35198 gsd-2020-35198 2026-10-03T22:19:04.887894+00:00 gsd-2020-35198 https://cve.radiocsirt.org/vuln/icsa-21-119-04 ICSA-21-119-04 — Multiple RTOS (Update E) 2026-10-03T22:19:04.887904+00:00

Media Tek LinkIt SDK versions prior to 4.6.1 is vulnerable to integer overflow in memory allocation calls pvPortCalloc(calloc) and pvPortRealloc(realloc), which can lead to memory corruption on the target device.CVE-2021-30636 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution.CVE-2021-27431 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). ARM mbed-ualloc memory library Version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.CVE-2021-27433 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.CVE-2021-27435 has been assigned to this vulnerability…

 https://cve.radiocsirt.org/vuln/sevd-2021-313-05 SEVD-2021-313-05 — BadAlloc Vulnerabilities 2026-10-03T22:19:04.887984+00:00

Schneider Electric is aware of multiple memory allocation vulnerabilities dubbed 'BadAlloc', disclosed by Microsoft on April 29, 2021. The impact of a successful exploitation of the vulnerabilities may result in denial of service, or remote code execution, depending on the context.

September 2025 Update: Corrected and updated affected versions for EPC2000, EPC3000, Eurotherm E+PLC400, Eurotherm Eycon 10/20 Visual Supervisor, Eurotherm T2550 PAC, and Eurotherm T2750 PAC.