Approved changes feed: RSS · Atom
cpe:2.3:o:amazon:freertos:*:*:*:*:-:*:*:*
part: o version: * update: *
| Vendor | Amazon (0ed129a9-8e26-53dc-aefe-55957e638c30) |
|---|---|
| Product | Freertos (da34371a-518d-5ff1-b2f6-64e7581cd255) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/aws/amazon-freertos |
purl2cpe | 2026-06-01 10:12:13.210954 |
pkg:github/freertos/freertos |
purl2cpe | 2026-06-01 10:12:13.210956 |
pkg:github/freertos/freertos-kernel |
purl2cpe | 2026-06-01 10:12:13.210958 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43997 |
vulnerable | 2026-06-08 05:36:44.720472 |
Details available
FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve further privilege escalation by branching directly inside a FreeRTOS MPU API wrapper function with a manually crafted stack frame. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with MPU support enabled (i.e. configENABLE_MPU set to 1). These are fixed in V10.5.0 and in V10.4.3-LTS Patch 3.
Published: 2021-11-17T00:00:00.000Z
Updated: 2024-08-04T04:10:16.905Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.