CVE-2018-16522

Description

Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md ↗
• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ ↗
• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/ ↗