Freertos-plus-tcp (Amazon) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-04-29. Vendor: Amazon.
CVEs of Freertos-plus-tcp
- CVE-2026-7426 - CVSS 8.1 (high), 2026-04-29: Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent…
- CVE-2026-7425 - CVSS 6.5 (medium), 2026-04-29: Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor…
- CVE-2026-7424 - CVSS 8.1 (high), 2026-04-29: Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6…
- CVE-2026-7423 - CVSS 6.5 (medium), 2026-04-29: Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial…
- CVE-2026-7422 - CVSS 7.1 (high), 2026-04-29: Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size…
- CVE-2025-11618 - CVSS 5.3 (medium), 2025-10-10: A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet…
- CVE-2025-11617 - CVSS 5.4 (medium), 2025-10-10: A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect…
- CVE-2025-11616 - CVSS 5.4 (medium), 2025-10-10: A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain…
- CVE-2024-38373 - CVSS 9.6 (critical), 2024-06-24: FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS…
