CNNVD-202510-1429 Information
Oct 10, 2025
cve
CNNVD ID
CNNVD-202510-1429
Related CVE
- CNNVD Published: 2025-10-10
Description (Chinese)
FreeRTOS-Plus-TCP是FreeRTOS开源的一种适用于 FreeRTOS 的可扩展的开源和线程安全 TCP/IP 堆栈。 FreeRTOS-Plus-TCP存在安全漏洞，该漏洞源于ICMPv6数据包处理代码缺少验证检查，可能导致越界读取。
Description (English)
FreeRTOS-Plus-TCP is an extended open source and linear security TCP/IP stack for FreeRTOS open source. FreeRTOS-Plus-TCP has a security loophole, which stems from the lack of validation checks of ICMPv6 data package processing codes, which may lead to cross-border reading.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
FreeRTOS
Published
2025-10-10
Last Modified
2026-02-24
References
https://aws.amazon.com/security/security-bulletins/AWS-2025-023/ https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.4 https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-8j9h-xjm9-8j6j