FreeRTOS-Plus-TCP

6 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-7425

  Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP

  Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated…

  AWS FreeRTOS-Plus-TCP
  Apr 29, 2026
• Medium 5.3
  CVE-2026-7423

  Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP

  Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled, because header sizes are subtracted f…

  AWS FreeRTOS-Plus-TCP
  Apr 29, 2026
• Medium 6.5
  CVE-2026-7422

  MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing

  Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address to match one of the device's own registered endpoints,…

  AWS FreeRTOS-Plus-TCP
  Apr 29, 2026
• Medium 4.3
  CVE-2025-11618

  Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP

  A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using I…

  AWS FreeRTOS-Plus-TCP
  Oct 10, 2025
• Medium 5.4
  CVE-2025-11617

  Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP

  A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6. We recommend use…

  AWS FreeRTOS-Plus-TCP
  Oct 10, 2025
• Medium 5.4
  CVE-2025-11616

  Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP

  A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6…

  AWS FreeRTOS-Plus-TCP
  Oct 10, 2025