CVE-2026-7426
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FreeRTOS-Plus-TCP
- Vendor
- AWS
- Product
- FreeRTOS-Plus-TCP
- Platforms
- Unknown
- Default status
unaffected- Package collection
- https://github.com/FreeRTOS/FreeRTOS-Plus-TCP
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.0.0 | affected | semver | 4.2.6 | Unavailable | None listed |
| 4.3.0 | affected | semver | 4.4.1 | Unavailable | None listed |
| 4.2.6 | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| 4.4.1 | unaffected | Unavailable | Unavailable | Unavailable | None listed |