Amazon Freertos-plus-tcp

9 CVEs affecting Amazon Freertos-plus-tcp. Latest disclosed: 2026-04-29. Critical: 1, High: 2.

Top CVEs affecting Amazon Freertos-plus-tcp
CVESeverityScorePublishedSummary
CVE-2024-38373Critical9.62024-06-24FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon…
CVE-2026-7426High8.12026-04-29Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent net…
CVE-2026-7424High8.12026-04-29Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 a…
CVE-2026-7425Medium6.52026-04-29Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to…
CVE-2026-7422Medium6.52026-04-29Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validatio…
CVE-2025-11617Medium5.42025-10-10A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect pay…
CVE-2025-11616Medium5.42025-10-10A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain mess…
CVE-2026-7423Medium5.32026-04-29Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of…
CVE-2025-11618Medium4.32025-10-10A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet w…