CVE-2025-11616

Medium CVSS: 5.3

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6.

Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Vendor

Amazon

Product

Freertos-plus-tcp

CWE

CWE-126

Yayın Tarihi

2025-10-10 18:15:38

Güncelleme

2025-10-31 18:22:59

Source Identifier

ff89ba41-3aa1-4d27-914a-91399e9639e5

KEV Date Added

Kategoriler

CWE-126 Freertos-plus-tcp MEDIUM Amazon 2025

Referanslar

https://aws.amazon.com/security/security-bulletins/AWS-2025-023/ https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.4 https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-8j9h-xjm9-8j6j

Benzer Kayıtlar

High

CVE-2026-3337

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine au…

High

CVE-2026-3338

Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verificatio…

High

CVE-2026-3336

Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain v…

Medium

CVE-2026-1386

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on L…

High

CVE-2025-14503

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account…

High

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string input…