Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-30636: In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
CVE-2021-30636 · published 4 years ago
Summary
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
What to do
- Update mediatek linkit_software_development_kit to version 4.6.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mediatek | linkit_software_development_kit |
< 4.6.1 cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:* |
Original advisory text
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 Mitigation Third Party Advisory US Government Resource VDB Entry
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-190Integer Overflow
Timeline
Published24 Jan 2022
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2021-30636 · NVD
Track software like this
Free during beta