CVE-2025-11616

MEDIUM

FreeRTOS-Plus-TCP 4.0.0-4.3.3 - Buffer Over-read in ICMPv6 Packet Processing

Title source: llm

Description

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

References (3)

Core 3

Core References

Release Notes patch product

https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.4

Vendor Advisory vendor-advisory

https://aws.amazon.com/security/security-bulletins/AWS-2025-023/

Vendor Advisory third-party-advisory

https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-8j9h-xjm9-8j6j

Scores

CVSS v3 5.4

EPSS 0.0028

EPSS Percentile 19.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-126

Status published

Products (1)

amazon/freertos-plus-tcp 4.0.0 - 4.3.4

Published Oct 10, 2025

Tracked Since Feb 18, 2026