FreeRTOS

Products

ProductCVEsExploitedLatest
FreeRTOS-Kernel8–Oct 30, 2026
FreeRTOS-Plus-TCP3–Oct 16, 2026
coreMQTT1–May 15, 2026

Exploited and recent CVEs

  • CVE-2026-119086 Medium 6.5 Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel 0.2%
  • CVE-2026-102552 Medium 5.9 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver 0.2%
  • CVE-2026-102551 High 7.7 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling 0.3%
  • CVE-2026-109588 High 8.8 Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel 0.2%
  • CVE-2026-109587 High 8.8 Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel 0.1%
  • CVE-2026-77237 Medium 6.5 Missing type validation in xQueueAddToSet in FreeRTOS-Kernel 0.2%
  • CVE-2026-77236 High 7.3 Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel 0.2%
  • CVE-2026-77235 High 7.3 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel 0.2%
  • CVE-2026-77234 High 8.8 Improper input validation in FreeRTOS-Kernel timer command handling 0.2%
  • CVE-2026-8686 High 7.5 DoS from MQTT v5.0 Deserialization Fault in core MQTT 0.4%
  • CVE-2024-38373 Critical 9.6 FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser 0.6%
  • CVE-2024-28115 High 8.8 Privilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled 0.2%