Freertos (Amazon) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 149 known versions, newest CVE from 2026-08-21. Vendor: Amazon.
CVEs of Freertos
- CVE-2026-77237 - CVSS 8.4 (high), 2026-08-21: Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with…
- CVE-2026-77236 - CVSS 8.3 (high), 2026-08-21: Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata…
- CVE-2026-77235 - CVSS 8.3 (high), 2026-08-21: Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free…
- CVE-2026-77234 - CVSS 9.3 (critical), 2026-08-21: Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context.…
- CVE-2025-5688 - CVSS 7.5 (high), 2025-06-04: We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only…
- CVE-2024-28115 - CVSS 8.8 (high), 2024-03-07: FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege…
- CVE-2021-27504 - CVSS 7.8 (high), 2023-11-21: Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow…
- CVE-2021-43997 - CVSS 7.8 (high), 2021-11-17: FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS…
- CVE-2021-32020 - CVSS 9.8 (critical), 2021-05-03: The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory.
- CVE-2021-31572 - CVSS 9.8 (critical), 2021-04-22: The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer.
- CVE-2021-31571 - CVSS 9.8 (critical), 2021-04-22: The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation.
- CVE-2018-16602 - CVSS 5.9 (medium), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
- CVE-2018-16601 - CVSS 8.1 (high), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
- CVE-2018-16603 - CVSS 5.9 (medium), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
- CVE-2018-16525 - CVSS 8.1 (high), 2018-12-06: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow…
- CVE-2018-16598 - CVSS 5.9 (medium), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
- CVE-2018-16524 - CVSS 5.9 (medium), 2018-12-06: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow…
- CVE-2018-16527 - CVSS 5.9 (medium), 2018-12-06: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow…
- CVE-2018-16600 - CVSS 5.9 (medium), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
- CVE-2018-16523 - CVSS 7.4 (high), 2018-12-06: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow…
- CVE-2018-16526 - CVSS 8.1 (high), 2018-12-06: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow…
- CVE-2018-16599 - CVSS 5.9 (medium), 2018-12-06: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect…
