CVE-2026-7426: Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7426?
CVE-2026-7426 is classified as a high severity vulnerability due to its potential for memory corruption.
How do I fix CVE-2026-7426?
To fix CVE-2026-7426, you should upgrade FreeRTOS-Plus-TCP to version 4.2.6 or 4.4.1 or later.
What kind of vulnerability is CVE-2026-7426?
CVE-2026-7426 is an out-of-bounds write vulnerability that occurs due to insufficient validation in prefix length handling.
Who is affected by CVE-2026-7426?
CVE-2026-7426 affects FreeRTOS-Plus-TCP versions prior to 4.2.6 and 4.4.1.
Can CVE-2026-7426 be exploited remotely?
Yes, CVE-2026-7426 can be exploited by an adjacent network actor, allowing for potential memory corruption.