CVE-2025-5688
HIGHAmazon FreeRTOS 2.3.4-4.3.2 - Out-of-bounds Write via LLMNR or mDNS Query Processing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-5688. PoCs published by mbanyamer.
AI-analyzed exploit summary The repository contains a functional Python exploit for CVE-2025-5688, targeting an out-of-bounds write vulnerability in FreeRTOS-Plus-TCP's LLMNR/mDNS name parsing. The exploit crafts a malicious DNS query with an excessively long name to trigger memory corruption, leading to DoS or potential RCE.
Description
We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.
Exploits (1)
The repository contains a functional Python exploit for CVE-2025-5688, targeting an out-of-bounds write vulnerability in FreeRTOS-Plus-TCP's LLMNR/mDNS name parsing. The exploit crafts a malicious DNS query with an excessively long name to trigger memory corruption, leading to DoS or potential RCE.
References (3)
Scores
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N