CVE-2025-5688highCWE-787

CVE-2025-5688: falha de alta gravidade em Amazon FreeRTOS

Out of Bounds Write in FreeRTOS-Plus-TCP

Publicada em 04 jun 2025 · Atualizada em 14 out 2025

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.4%

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Amazon · FreeRTOS

Referências

https://aws.amazon.com/security/security-bulletins/AWS-2025-012/https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.2 https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-5x4f-fvv8-wr65