CVE-2025-11618

MEDIUM

FreeRTOS-Plus-TCP 4.0.0-4.3.3 - Null Pointer Dereference in UDP/IPv6 Packet Processing

Title source: llm

Description

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

References (3)

Core 3

Core References

Release Notes patch product

https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.4

Vendor Advisory vendor-advisory

https://aws.amazon.com/security/security-bulletins/AWS-2025-023/

Vendor Advisory third-party-advisory

https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-6fh9-mqxj-hmwj

Scores

CVSS v3 4.3

EPSS 0.0005

EPSS Percentile 15.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (1)

amazon/freertos-plus-tcp 4.0.0 - 4.3.4

Published Oct 10, 2025

Tracked Since Feb 18, 2026