CVE-2025-11618 Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP
Attackers can cause a denial of service in IPv6-enabled FreeRTOS devices by sending malformed UDP packets that trigger an invalid pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-11618?
CVE-2025-11618 is a medium-severity vulnerability in AWS FreeRTOS-Plus-TCP, published on 10 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6.
We recommend upgrading to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.
Weakness: CWE-476
Which versions are affected by CVE-2025-11618?
It affects 1 product.
Products include Amazon Freertos-Plus-Tcp.
How do I fix CVE-2025-11618?
No fix has been published for CVE-2025-11618 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-11618 being exploited?
There is no known exploitation of CVE-2025-11618 in the wild and no public exploit code.
Other vulnerabilities in AWS FreeRTOS-Plus-TCP
- CVE-2024-38373 FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser
- CVE-2026-7424 Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
- CVE-2026-7422 MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing
- CVE-2026-7426 Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP
- CVE-2026-7423 Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP
Sources
Also known as GHSA-6fh9-mqxj-hmwj.