CVE-2025-11616 MEDIUM

CVE-2025-11616: Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP

Vendor Aws
Product FreeRTOS-Plus_TCP
Weakness CWE-126
Published October 10, 2025
Last update October 10, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Key dates

02Disclosure timeline

October 10, 2025 CVE published
October 10, 2025 Record updated