This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-7423 | BDVDB-2026-329616 Detail

AWSFreeRTOS-Plus-TCP

Description#

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled, because header sizes are subtracted from a packet length field without validating the field is large enough, resulting in a heap out-of-bounds read of up to approximately 65KB. To mitigate this issue, users should upgrade to the fixed version when available.

Impact#

CAPEC-153: Input Data Manipulation

Weaknesses#

  • CWE-191 Integer Underflow (Wrap or Wraparound)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.