Freertos Plus Tcp
Approved changes feed: RSS · Atom
cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Amazon (0ed129a9-8e26-53dc-aefe-55957e638c30) |
|---|---|
| Product | Freertos Plus Tcp (728cdd06-3815-5cba-bb0f-c2c0a19eceb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/aws/amazon-freertos |
purl2cpe | 2026-06-01 10:12:11.431507 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7426 |
vulnerable | 2026-06-08 08:08:57.208595 |
Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP
HIGH (8.1)
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted.
To mitigate this issue, users should upgrade to the fixed version when available.
Published: 2026-04-29T18:53:52.187Z
Updated: 2026-04-29T22:14:34.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7425 |
vulnerable | 2026-06-08 08:08:57.208258 |
Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP
MEDIUM (6.5)
Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated PREFIX_INFORMATION option that is smaller than the expected structure size.
To mitigate this issue, users should upgrade to the fixed version when available.
Published: 2026-04-29T18:52:36.439Z
Updated: 2026-04-29T22:14:08.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7424 |
vulnerable | 2026-06-08 08:08:57.207758 |
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
HIGH (8.1)
Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP task freeze requiring hardware reset) by sending a single crafted DHCPv6 packet.
The issue is present whenever DHCPv6 is enabled.
To mitigate this issue, users should upgrade to version V4.2.6 or V4.4.1 or newer.
Published: 2026-04-29T18:51:28.385Z
Updated: 2026-04-29T22:13:39.794Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7423 |
vulnerable | 2026-06-08 08:08:57.207194 |
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP
MEDIUM (5.3)
Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled, because header sizes are subtracted from a packet length field without validating the field is large enough, resulting in a heap out-of-bounds read of up to approximately 65KB.
To mitigate this issue, users should upgrade to the fixed version when available.
Published: 2026-04-29T18:36:28.353Z
Updated: 2026-04-29T19:08:11.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7422 |
vulnerable | 2026-06-08 08:08:57.206632 |
MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing
MEDIUM (6.5)
Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address to match one of the device's own registered endpoints, because the loopback detection mechanism skips all input validation for packets whose source MAC matches a local endpoint.
To mitigate this issue, users should upgrade to the fixed version when available.
Published: 2026-04-29T18:35:33.797Z
Updated: 2026-04-29T19:07:31.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11618 |
vulnerable | 2026-06-08 07:04:28.617443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11617 |
vulnerable | 2026-06-08 07:04:28.616965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11616 |
vulnerable | 2026-06-08 07:04:28.615309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38373 |
vulnerable | 2026-06-08 06:41:45.156192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.