How many freertos freertos-plus-tcp CVEs are in CISA KEV?

None of freertos freertos-plus-tcp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of freertos freertos-plus-tcp are affected?

24 distinct freertos freertos-plus-tcp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in freertos freertos-plus-tcp CVEs?

freertos freertos-plus-tcp's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).

How many critical freertos freertos-plus-tcp vulnerabilities are there?

freertos freertos-plus-tcp has 1 critical and 3 high-severity CVEs.

What is the average severity of freertos freertos-plus-tcp CVEs?

The average CVSS base score across freertos freertos-plus-tcp's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

freertos

10 CVEs

freertos freertos-plus-tcp Vulnerabilities

Name: freertos freertos-plus-tcp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for freertos-plus-tcp by freertos.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2024–2026

Last updated April 29, 2026

Overview

freertos freertos-plus-tcp has 10 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting freertos freertos-plus-tcp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of freertos freertos-plus-tcp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of freertos freertos-plus-tcp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No freertos freertos-plus-tcp CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every freertos freertos-plus-tcp version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

4.0.0-appsec10 CVEs
4.2.05 CVEs
4.2.15 CVEs
4.2.25 CVEs
4.2.35 CVEs
4.2.45 CVEs
4.2.55 CVEs
4.4.05 CVEs
4.3.14 CVEs
4.3.23 CVEs
4.3.33 CVEs
2.3.01 CVE
2.3.11 CVE
2.3.21 CVE
2.3.31 CVE
2.3.41 CVE
2.4.01 CVE
4.1.01 CVE

Version ranges

>= 4.0.0, <= 4.1.01 CVE

Fixed in

5986530664073a609e634bde63dd9bff37e725f05 CVEs
c12361095aca68aeed858f45d14395fbffa92c0d5 CVEs
c32f8a484da9d810b716fcccf40bef685de9545a3 CVEs
21c0438b73c7a22f8c7b08d0ff5ac8a5e1e21a971 CVE
6fe8ae69a0412c0a1e203d58424dec861158c7231 CVE

Find a version

10 CVEs

Sort

Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP
CVE-2026-7426
Patch
CWE-787
Medium · CVSS 6.1
EPSS 0.2% (16th pct)2026-04-29
Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP
CVE-2026-7425
Patch
CWE-125
Medium · CVSS 6.0
EPSS 0.2% (14th pct)2026-04-29
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
CVE-2026-7424
Patch
CWE-191
High · CVSS 7.2
EPSS 0.2% (13th pct)2026-04-29
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP
CVE-2026-7423
Patch
CWE-191
Medium · CVSS 6.0
EPSS 0.2% (13th pct)2026-04-29
MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing
CVE-2026-7422
Patch
CWE-290
High · CVSS 7.1
EPSS 0.2% (7th pct)2026-04-29
Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP
CVE-2025-11618
Patch
CWE-476
Medium · CVSS 5.3
EPSS 0.3% (24th pct)2025-10-10
Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP
CVE-2025-11617
Patch
CWE-126
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2025-10-10
Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP
CVE-2025-11616
Patch
CWE-126
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2025-10-10
Out of Bounds Write in FreeRTOS-Plus-TCP
CVE-2025-5688
Patch
CWE-787
High · CVSS 7.5
EPSS 0.3% (26th pct)2025-06-04
Critical vulnerability · 2024-06-24
CVE-2024-38373
Patch
CWE-126
Critical · CVSS 9.6
EPSS 0.6% (47th pct)2024-06-24

Common weakness types

The CWE weakness categories most often found in freertos freertos-plus-tcp CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many freertos freertos-plus-tcp CVEs were published each year.

2024

1

2025

4

2026

5

Other freertos products

Browse vulnerabilities for other products by freertos.

FreeRTOS-Kernel8 CVEs coremqtt1 CVEs

All freertos vulnerabilities

Frequently asked questions

Common questions about freertos freertos-plus-tcp vulnerabilities.

How many CVEs does freertos freertos-plus-tcp have?: freertos freertos-plus-tcp has 10 published CVE records since 2024.
How many freertos freertos-plus-tcp CVEs are in CISA KEV?: None of freertos freertos-plus-tcp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for freertos freertos-plus-tcp vulnerabilities?: No freertos freertos-plus-tcp CVEs currently have a tracked public exploit in this dataset.
Which versions of freertos freertos-plus-tcp are affected?: 24 distinct freertos freertos-plus-tcp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in freertos freertos-plus-tcp CVEs?: freertos freertos-plus-tcp's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).
How many critical freertos freertos-plus-tcp vulnerabilities are there?: freertos freertos-plus-tcp has 1 critical and 3 high-severity CVEs.
What is the average severity of freertos freertos-plus-tcp CVEs?: The average CVSS base score across freertos freertos-plus-tcp's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track freertos freertos-plus-tcp vulnerabilities

Monitor new freertos freertos-plus-tcp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing