VULNERABILITY INTELLIGENCE

CVE-2026-7425

CVSS score6.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-04-29
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafted Router Advertisement with a truncated PREFIX_INFORMATION option that is smaller than the expected structure size. To mitigate this issue, users should upgrade to the fixed version when available.

Weakness classification

  • ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-125

Primary references