CVE-2025-11616mediumCWE-126

CVE-2025-11616: fallo de gravedad media en AWS FreeRTOS-Plus_TCP

Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP

Publicada el

Seguir esta CVE+ Monitorear FreeRTOS-Plus-TCP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.3%
A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Productos afectados
AWS · FreeRTOS-Plus_TCP