CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – FreeRTOS-Plus-TCP 越界写入漏洞利用 远程内存损坏 / 拒绝服务 / 潜在远程代码执行触发 ——在FreeRTOS-Plus-TCP处理LLMNR或mDNS查询中过长的DNS名称时发生（缓冲区分配方案1）。 漏洞利用作者： Mohammed Idrees Banyamer 所在国家： 约旦 Instagram： @banyamersecurity 日期： 2025年12月26日 概述 本PoC发送一个精心构造的UDP多播数据包，其中包含一个超长的DNS名称，以触发存在漏洞的FreeRTOS-Plus-TCP （v2.3.4 –...

EUVD-2026-82385

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src/WebRequest.cpp stores boundaryPosition as an 8-bit value while parseMultipartPostByte processes the boundary. A remote request...

CVE-2026-54571: Integer Overflow or Wraparound

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src/WebRequest.cpp stores boundaryPosition as an 8-bit value while parseMultipartPostByte processes the boundary. A remote request...

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77234

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77235

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77236

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

EUVD-2026-64034

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237 Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237 Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77236 Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77236 Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

EUVD-2026-64017

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77236

CVE-2026-77236 is a missing input validation vulnerability in the SecureContext_AllocateContext function of FreeRTOS-Kernel prior to version 11.3.1. The absence of a minimum size check on the stack size parameter allows a local attacker to trigger an out-of-bounds write that corrupts secure-world...

CVE-2026-77235

FreeRTOS-Kernel versions prior to 11.3.1 contain a missing privilege verification in the secure context cleanup handler (SecureContext_FreeContext). A local attacker with low privileges can trigger a use-after-free condition in secure-world memory through the SVC handler for secure context deallo...

CVE-2026-77235 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77235 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

EUVD-2026-64013

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77234 Improper input validation in FreeRTOS-Kernel timer command handling

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later...