VulnSea

FreeRTOS-Plus-TCP vulnerabilities

CVEs whose affected-version data names the FreeRTOS-Plus-TCP package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-102551High· 7.7
today

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link p…

▾ TwilightFreeRTOS · FreeRTOS-Plus-TCPvia CVEORG
CVE-2026-102552Medium· 5.9
today

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. …

▾ SunlitFreeRTOS · FreeRTOS-Plus-TCPvia CVEORG
CVE-2025-11618Medium· 4.3
1y ago

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affect…

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affect…

▾ Sunlitamazon · freertos-plus-tcpEPSS 0.34%via NVD
CVE-2025-11617Medium· 5.4
1y ago

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using …

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using …

▾ Sunlitamazon · freertos-plus-tcpEPSS 0.31%via NVD
CVE-2025-11616Medium· 5.4
1y ago

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect a…

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect a…

▾ Sunlitamazon · freertos-plus-tcpEPSS 0.31%via NVD
FreeRTOS-Plus-TCP vulnerabilities (CVEs) · VulnSea