Vulnerability · Published Oct 10, 2025 · Assigned by AMZN

CVE-2025-11618Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP

Medium 4.3

In plain English

A medium-severity null pointer dereference in FreeRTOS-Plus-TCP from AWS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 71.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Affected products (as reported)

Vendor	Product	Versions
AWS	FreeRTOS-Plus-TCP	4.0.0 – before 4.3.4

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.4 patch, product
https://aws.amazon.com/security/security-bulletins/AWS-2025-023/ vendor-advisory
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-6fh9-mqxj-hmwj third-party-advisory