Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7426 Heap Buffer Overflow in FreeRTOS-Plus-TCP IPv6 Router Advertisement Processing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7426
Post summary
A heap buffer overflow vulnerability (CVE‑2026‑7426) has been disclosed for FreeRTOS‑Plus‑TCP’s IPv6 Router Advertisement handling, but no PoC, exploit code, active exploitation, or patch is detailed.
CVE-2026-7426 Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network acto… https://www.cve.org/CVERecord?id=CVE-2026-7426
Post summary
The post references CVE‑2026‑7426, detailing insufficient validation of the IPv6 prefix length in FreeRTOS‑Plus‑TCP, and links to its CVE record, but provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amazon | freertos-plus-tcp | - | - | - |