Security Advisory

CVE-2026-7425

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-29 18:52:36

Last updated 2026-04-29 22:14:08

Assigner AMZN

CVSS score 6.5

State PUBLISHED

Description

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated PREFIX_INFORMATION option that is smaller than the expected structure size. To mitigate this issue, users should upgrade to the fixed version when available.

← Browse all CVEs View on cve.org ↗