5.3
Moyenne
CVE-2025-11618 A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer…
Description
A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FreeRTOS-Plus-TCP 4.0 | 4.0.0 → < 4.3.4 | 4.3.4 |
Références
- github.com github.com
- aws.amazon.com aws.amazon.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FreeRTOS-Plus-TCP
Les 7 CVE de FreeRTOS-Plus-TCP →
CVE-2026-7426
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before…
8.1
Élevée
CVE-2026-7425
Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and…
6.5
Moyenne
CVE-2026-7424
Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent…
8.1
Élevée
CVE-2026-7423
Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an…
5.3
Moyenne