Skip to content
OpenAdvisories

Vendor

FreeRTOS

12 known vulnerabilities.

Products

FreeRTOS-Kernel 8 FreeRTOS-Plus-TCP 3 coreMQTT 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119086

    Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privil…

    FreeRTOS FreeRTOS-Kernel
  • Medium 5.9
    CVE-2026-102552

    Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

    Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue,…

    FreeRTOS FreeRTOS-Plus-TCP
  • Medium 6.5
    CVE-2026-77237

    Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

    Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to ver…

    FreeRTOS FreeRTOS-Kernel