Threat database

CVE-2026-102552 is a medium severity vulnerability in Amazon FreeRTOS-Plus-TCP versions up to 4.4.1. It involves improper verification of the source of a communication channel in the DNS resolver, which could allow a remote attacker to insert a forged DNS reply into the device's DNS cache. The issue is fixed in version 4.4.2 by enabling ipconfigDNS_CHECK_REPLY_SOURCE_IP.

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate this issue, users should upgrade to version V4.4.2.

CVE-2026-109588 is a numeric truncation error vulnerability in FreeRTOS-Kernel versions 11.3.0 and 11.3.1 on the Arm Cortex-R82 MPU port. This flaw allows an unprivileged task on MPU-enabled builds to potentially read or write privileged kernel memory beyond the intended buffer boundaries via a stream buffer system call. The vulnerability is fixed in version 11.3.2 and later.

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.

CVE-2026-77235 is a use-after-free vulnerability in FreeRTOS-Kernel versions before 11.3.1. It arises from missing privilege verification in the secure context cleanup handler, potentially allowing local users to cause a use-after-free condition in secure-world memory via the SVC handler. This vulnerability has a high severity rating with a CVSS score of 7.3. Users should upgrade to FreeRTOS-Kernel version 11.3.1 or later to remediate the issue.

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

CVE-2026-8686 is a high-severity vulnerability in FreeRTOS coreMQTT version 5.0.0. It involves a missing bounds validation in the MQTT v5.0 property parser, which allows an MQTT broker to cause a denial of service by sending a crafted packet. The issue is fixed in version 5.0.1.