CVE-2026-7426

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-7426
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://aws.amazon.com/security/security-bulletins/2026-023-aws/ Vendor Advisory
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 Release Notes
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 Release Notes
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*
cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*
History

17 Jun 2026, 11:02

Type Values Removed Values Added
References () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x - Vendor Advisory, Patch () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x - Patch, Vendor Advisory

04 May 2026, 13:12

Type Values Removed Values Added
References () https://aws.amazon.com/security/security-bulletins/2026-023-aws/ - () https://aws.amazon.com/security/security-bulletins/2026-023-aws/ - Vendor Advisory
References () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 - () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 - Release Notes
References () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 - () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 - Release Notes
References () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x - () https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x - Vendor Advisory, Patch
First Time Amazon freertos-plus-tcp
Amazon
CPE cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*

30 Apr 2026, 15:13

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-29 20:16

Updated : 2026-06-17 11:02

NVD link : CVE-2026-7426

Mitre link : CVE-2026-7426

CVE.ORG link : CVE-2026-7426

JSON object : View

Products Affected

amazon

  • freertos-plus-tcp
CWE
CWE-787

Out-of-bounds Write