FreeRTOS-Plus-TCP vulnerabilities

2 known vulnerabilities in FreeRTOS-Plus-TCP from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  FreeRTOS-Plus-TCP: Out-of-bounds Write

  CVE-2026-7426Apr 29, 2026AWS

  Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length

• 8.1 High severity

  FreeRTOS-Plus-TCP: Integer Underflow (Wrap or Wraparound)

  CVE-2026-7424Apr 29, 2026AWS

  Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP