CVE-2026-7424

Received Received - Intake

Integer Underflow in FreeRTOS-Plus-TCP DHCPv6 Parser

Publication date: 2026-04-29

Last updated on: 2026-05-04

Assigner: AMZN

Description

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP task freeze requiring hardware reset) by sending a single crafted DHCPv6 packet. The issue is present whenever DHCPv6 is enabled. To mitigate this issue, users should upgrade to version V4.2.6 or V4.4.1 or newer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-29

Last Modified

2026-05-04

Generated

2026-07-26

AI Q&A

2026-04-29

EPSS Evaluated

2026-07-25

NVD

CVE-2026-7424

EUVD

EUVD-2026-26277

Affected Vendors & Products

Vendor	Product	Version / Range
amazon	freertos-plus-tcp	From 4.0.0 (inc) to 4.2.6 (exc)
amazon	freertos-plus-tcp	From 4.3.0 (inc) to 4.4.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

Executive Summary

This vulnerability is an integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP versions before V4.4.1 and V4.2.6.

An adjacent network actor can exploit this flaw by sending a specially crafted DHCPv6 packet.

Exploitation allows the attacker to corrupt the device's IPv6 address assignment, DNS configuration, and lease times.

Additionally, it can cause a denial of service by permanently freezing the IP task, requiring a hardware reset to recover.

Detection Guidance

The vulnerability involves an integer underflow in the DHCPv6 sub-option parser of FreeRTOS-Plus-TCP, which can be exploited by sending a crafted DHCPv6 packet from an adjacent network actor.

Detection would involve monitoring DHCPv6 traffic for unusual or malformed DHCPv6 packets that could trigger the vulnerability.

No specific detection commands or tools are provided in the available resources.

Impact Analysis

The vulnerability can impact you by allowing an attacker on the adjacent network to disrupt your device's network configuration.

Corruption of IPv6 address assignment
Corruption of DNS configuration
Corruption of DHCP lease times
Denial of service through permanent IP task freeze, requiring hardware reset

Compliance Impact

The vulnerability allows an adjacent network attacker to corrupt IPv6 address assignment, DNS configuration, and lease times, and to cause denial of service by freezing the IP task. This can impact the availability and integrity of network services.

While the CVE description and resources do not explicitly mention compliance with standards such as GDPR or HIPAA, the potential denial of service and corruption of network configuration could indirectly affect compliance by disrupting availability and integrity of systems that handle sensitive data.

No direct information is provided about how this vulnerability impacts compliance with specific regulations.

Mitigation Strategies

To mitigate this issue, users should upgrade to FreeRTOS-Plus-TCP version V4.2.6 or V4.4.1 or newer.

Hi! I’m here to help you understand CVE-2026-7424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70