CVE-2026-7423

216.73.217.22

· Published 29/04/2026 19:16 · Modified 29/04/2026 19:16

Labels: CVE-2026-7423 2026-04-29 CVE-2026-7423 CWE-191 ff89ba41-3aa1-4d27-914a-91399e9639e5

Essential information

Published: 29/04/2026 19:16
Modified: 29/04/2026 19:16
Author: —
Creator: —
CVSS: 6.0 MEDIUM (v3) 6.0 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled, because header sizes are subtracted from a packet length field without validating the field is large enough, resulting in a heap out-of-bounds read of up to approximately 65KB. To mitigate this issue, users should upgrade to the fixed version when available.

NVD status

Status: Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source: ff89ba41-3aa1-4d27-914a-91399e9639e5
NVD: View on NVD

Affected products (CPE)

Product	CPE
freertos / freertos-plus-tcp	`cpe:2.3:a:freertos:freertos-plus-tcp:<4.4.1:::::::*`
freertos / freertos-plus-tcp	`cpe:2.3:a:freertos:freertos-plus-tcp:<4.2.6:::::::*`