Vulnerabilities CVE-2026-7426

CVE-2026-7426

High

Open

TLP:CLEAR

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.

Details

CVSS Score: 8.1
EPSS Score ⓘ: 0.25%

16.2th percentile
CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Confidence: 90%
Published: Apr 29, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.