CVE-2025-11616 Buffer Over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP

What is CVE-2025-11616?

CVE-2025-11616 is a medium-severity memory corruption vulnerability in AWS FreeRTOS-Plus_TCP, published on 10 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6.

Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Weakness: CWE-126

Which versions are affected by CVE-2025-11616?

It affects 1 product.

Products include Amazon Freertos-Plus-Tcp.

How do I fix CVE-2025-11616?

No fix has been published for CVE-2025-11616 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-11616 being exploited?

There is no known exploitation of CVE-2025-11616 in the wild and no public exploit code.

Other vulnerabilities in AWS FreeRTOS-Plus_TCP

• CVE-2024-38373 FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser Critical 9.6
• CVE-2026-7424 Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP High 7.2
• CVE-2026-7422 MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing High 7.1
• CVE-2026-7426 Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP Medium 6.1
• CVE-2026-7423 Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP Medium 6.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8j9h-xjm9-8j6j.