Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated PREFIX_INFORMATION option that is smaller than the expected structure size. To mitigate this issue, users should upgrade to the fixed version when available.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7425 Denial of Service via Insufficient IPv6 Router Advertisement Option Validation in FreeRTOS-Plus-TCP https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7425
Post summary
The entry announces a DoS vulnerability (CVE‑2026‑7425) in FreeRTOS‑Plus‑TCP due to inadequate IPv6 RA option validation, with no exploitation or mitigation details provided.
CVE-2026-7425 Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a … https://www.cve.org/CVERecord?id=CVE-2026-7425
Post summary
The statement reports CVE-2026‑7425, describing an insufficient option length validation flaw in the IPv6 Router Advertisement parser of FreeRTOS‑Plus‑TCP affecting versions prior to V4.2.6 and V4.4.1, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amazon | freertos-plus-tcp | - | - | - |