AWS FreeRTOS-Plus-TCP vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Latest AWS FreeRTOS-Plus-TCP vulnerabilities

CVE-2026-102552 — Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver (CVSS 5.9)
CVE-2026-102551 — Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling (CVSS 7.7)
CVE-2026-7426 — Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP (CVSS 8.1)
CVE-2026-7425 — Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP (CVSS 6.5)
CVE-2026-7424 — Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP (CVSS 8.1)
CVE-2026-7423 — Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP (CVSS 6.5)
CVE-2026-7422 — MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing (CVSS 6.5)
CVE-2025-11618 — Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP (CVSS 4.3)
CVE-2025-11617 — Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP (CVSS 5.4)
CVE-2025-11616 — Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP (CVSS 5.4)
CVE-2024-38373 — FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser (CVSS 8.1)