Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-5688

Out of Bounds Write in FreeRTOS-Plus-TCP

Description

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Amazon FreeRTOS

Default version status: unaffected

  • 2.3.4 to < 4.3.2affected

References