CVE-2026-77237: Access of Resource Using Incompatible Type

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2021-31571

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation...

CVE-2024-28115

FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affe...

FreeRTOS Kernel Code Execution

The vulnerability of the real-time operating system FreeRTOS’s kernel is related to lack of access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

FreeRTOS-Kernel Security Vulnerability

FreeRTOS-Kernel is a software application. The repository contains only FreeRTOS kernel source/header files and kernel ports. A security vulnerability exists in FreeRTOS-Kernel version 10.6.1 and prior versions, which stems from an inability to adequately prevent local privilege escalation via...

PT-2023-8934 · Unknown · Freertos Kernel

Name of the Vulnerable Software and Affected Versions: FreeRTOS Kernel versions through 10.6.1 Description: The issue is related to insufficient protection against local privilege escalation via Return Oriented Programming techniques, should a vulnerability exist that allows code injection and...