CVE-2025-11617 Buffer Over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP

What is CVE-2025-11617?

CVE-2025-11617 is a medium-severity memory corruption vulnerability in AWS FreeRTOS-Plus-TCP, published on 10 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving a IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6.

We recommend users upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Weakness: CWE-126

Which versions are affected by CVE-2025-11617?

It affects 1 product.

Products include Amazon Freertos-Plus-Tcp.

How do I fix CVE-2025-11617?

No fix has been published for CVE-2025-11617 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-11617 being exploited?

There is no known exploitation of CVE-2025-11617 in the wild and no public exploit code.

Other vulnerabilities in AWS FreeRTOS-Plus-TCP

• CVE-2024-38373 FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser Critical 9.6
• CVE-2026-7424 Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP High 7.2
• CVE-2026-7422 MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing High 7.1
• CVE-2026-7426 Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP Medium 6.1
• CVE-2026-7423 Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP Medium 6.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wmjr-wm93-cvv2.