CVE-2025-11618 - CVE House

Back to Database

Status published Medium CVE-2025-11618

Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP

5.3 CVSS

Vulnerability Description

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11618

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from AWS

View All →

Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client

Path Traversal in AWS SAM CLI allows file copy to local cache

Path Traversal in AWS SAM CLI allows file copy to build container

Improper timestamp caching during snapshot rollback in tough

Failure to detect delegated target rollback in tough

Affected Vendor

AWS

View all reports →

Affected Software

FreeRTOS-Plus-TCP

Vulnerable Versions:

4.0.0

Timeline

Official Publish: October 10th, 2025

Last Modified: October 10th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1499.004 Application or System Exploitation

T1489 Service Stop

T1203 Exploitation for Client Execution

T1190 Exploit Public-Facing Application