GCVE-110-CERTCC-2018-317277

Advisory PublishedCVSS 7.9/10

Vulnetix · Advisory published November 1, 2018

Texas Instruments CC2640 and CC2650 microcontrollers are vulnerable to a heap overflow and may allow unauthenticated firmware installation.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.9/10

High · AV:A/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report0

certcc-cvss-temporal-env

temporal_score6.2remediation_levelOFreport_confidenceCenvironmental_score4.64042060842752target_distributionMenvironmental_vectorCDP:N/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2018-16986 CVE-2018-7080

References

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

url

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

url

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

url

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

url

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

url

Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON