Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

21 records in Freertos · all components

Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
Priority LOW 35

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory.

CVSS 4.0HIGH 8.2 Local Low privileges No interaction EPSS 0.00175 Published 2026-08-21 No fix listed CWE-125
Priority LOW 35

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size paramet…

CVSS 4.0HIGH 8.3 Local Low privileges No interaction EPSS 0.00162 Published 2026-08-21 No fix listed CWE-787
Priority LOW 35

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure cont…

CVSS 4.0HIGH 8.3 Local Low privileges No interaction EPSS 0.00157 Published 2026-08-21 No fix listed CWE-416
Priority LOW 34

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code exec…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-21 Fixed in 4.40.00.07, 4.40.00 +1 CWE-190
Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvPro…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.0185 Published 2018-12-06 No fix listed CWE-200
Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvChec…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01829 Published 2018-12-06 No fix listed CWE-200
Open these records in search →