Freertos

11 CVEs across 3 Freertos products. Browse Freertos vulnerabilities, severities, and proof-of-concept exploits.

Freertos products with known CVEs

ProductCVEs
Freertos-Kernel7
Freertos-Plus-Tcp3
Coremqtt1
Freertos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-109588High8.82026-10-16Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MP…
CVE-2026-109587High8.82026-10-16Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled…
CVE-2026-102552Medium5.92026-10-16Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to…
CVE-2026-102551High7.72026-10-16Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a…
CVE-2026-77237Medium6.52026-08-21Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE…
CVE-2026-77236High7.32026-08-21Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via…
CVE-2026-77235High7.32026-08-21Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free conditi…
CVE-2026-77234High8.82026-08-21Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context…
CVE-2026-8686High7.52026-05-15Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted pac…
CVE-2024-38373Critical9.62024-06-24FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon…
CVE-2024-28115High8.82024-03-07FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege esca…