VulnSocial

CVE-2026-7424Disclosure(amazon / freertos-plus-tcp)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP task freeze requiring hardware reset) by sending a single crafted DHCPv6 packet. The issue is present whenever DHCPv6 is enabled. To mitigate this issue, users should upgrade to version V4.2.6 or V4.4.1 or newer.

amazon CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • freertos-plus-tcp

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-29); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
amazon
Products
freertos-plus-tcp

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-29: 2Mentions · 2026-04-30: 1Technical Details · 2026-04-29: 2Technical Details · 2026-04-30: 104-2904-30
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-292
Disclosure2
2026-04-301
General1
Full discourse3 posts
  • Eyal Estrin ☁️@eyalestrin
    General

    CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP http://dlvr.it/TSJFMf #patchmanagement

    Post summary

    The post references CVE-2026-7424 as an integer underflow in FreeRTOS-Plus-TCP’s DHCPv6 sub-option parser, but provides no PoC, exploit, active‑exploitation evidence, or explicit patch details, framing it only in a patch‑management context.

    0100035
    2.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7424 Integer Underflow in FreeRTOS-Plus-TCP DHCPv6 Sub-Option Parser Before V4.4.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7424

    Post summary

    The text announces CVE-2026-7424, detailing an integer underflow vulnerability in FreeRTOS-Plus-TCP's DHCPv6 Sub‑Option Parser (before v4.4.1) without providing PoC, exploit or patch information.

    0000044
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7424 Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address as… https://www.cve.org/CVERecord?id=CVE-2026-7424

    Post summary

    The note announces a new integer underflow in FreeRTOS‑Plus‑TCP's DHCPv6 parser that could let a nearby network actor corrupt a device’s IPv6 address.

    0000084
    57.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appamazonfreertos-plus-tcp---

Explore more

Back to dashboardamazon CVEsfreertos-plus-tcp vulnerabilities