FreeRTOS-Plus-TCP vulnerabilities

2 known vulnerabilities in FreeRTOS-Plus-TCP from FreeRTOS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  FreeRTOS-Plus-TCP: Improper Verification of Source of a Communication Channel

  CVE-2026-102551Oct 16, 2026FreeRTOS

  Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address conf

• 8.1 High severity

  FreeRTOS-Plus-TCP: Out-of-bounds Read

  CVE-2024-38373Jun 24, 2024FreeRTOS

  FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain n