Multiple RTOS (Update B)

Published

2021-05-20 14:00:13 UTC

Summary

This updated advisory is a follow-up to the advisory update titled ICSA-21-119-04 Multiple RTOS (Update A) that was published May 10, 2021, to the ICS webpage on us-cert.cisa.gov. CISA is aware of a public report, known as “BadAlloc” that details vulnerabilities found in multiple real-time operating systems (RTOS) and supporting libraries. This advisory contains mitigations for Integer Overflow or Wraparound vulnerabilities associated with this "BadAlloc" report.