GCVE - cpe:2.3:o:amazon:freertos:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amazon:freertos:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amazon (`0ed129a9-8e26-53dc-aefe-55957e638c30`)
Product	Freertos (`da34371a-518d-5ff1-b2f6-64e7581cd255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/aws/amazon-freertos`	purl2cpe	2026-06-01 10:12:13.200555
`pkg:github/freertos/freertos`	purl2cpe	2026-06-01 10:12:13.200556
`pkg:github/freertos/freertos-kernel`	purl2cpe	2026-06-01 10:12:13.200558

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28115`	vulnerable	2026-06-08 06:33:26.498293	Privilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled HIGH (8.8) FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues are fixed in version 10.6.2 with a new MPU wrapper. Published: 2024-03-07T20:54:00.743Z Updated: 2024-08-28T17:42:09.830Z Open on db.gcve.eu Reference links https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-xcv7-v92w-gq6r https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.6.2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32020`	vulnerable	2026-06-08 05:31:54.612364	Details available The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory. Published: 2021-05-03T21:12:44.000Z Updated: 2024-08-03T23:17:28.528Z Open on db.gcve.eu Reference links https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31572`	vulnerable	2026-06-08 05:31:53.703001	Details available The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer. Published: 2021-04-22T17:56:35.000Z Updated: 2024-08-03T23:03:33.364Z Open on db.gcve.eu Reference links https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/d05b9c123f2bf9090bce386a244fc934ae44db5b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31571`	vulnerable	2026-06-08 05:31:53.702516	Details available The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation. Published: 2021-04-22T17:56:24.000Z Updated: 2024-08-03T23:03:33.581Z Open on db.gcve.eu Reference links https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/47338393f1f79558f6144213409f09f81d7c4837	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.