PT-2026-35975 · Unknown · Freertos-Plus-Tcp

Eun0Us| Espilon · Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-7424

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRTOS-Plus-TCP versions prior to V4.2.6 FreeRTOS-Plus-TCP versions prior to V4.4.1

Description An integer underflow in the DHCPv6 sub-option parser occurs whenever DHCPv6 is enabled. This allows an adjacent network actor to send a single crafted DHCPv6 packet to corrupt the device's IPv6 address assignment, DNS configuration, and lease times. This can lead to a denial of service, resulting in a permanent IP task freeze that requires a hardware reset.

Recommendations Upgrade to version V4.2.6 or newer. Upgrade to version V4.4.1 or newer.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2026-7424

Affected Products

Freertos-Plus-Tcp

References · 6

• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 · Patch
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 · Patch
• https://aws.amazon.com/security/security-bulletins/2026-022-aws · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7424 · Security Note
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-wrhm-c99p-2p8g · Note
• https://twitter.com/CVEnew/status/2049578370472812977 · Twitter Post