Vulnerabilities > Amazon > Freertos > High

DATE CVE VULNERABILITY TITLE RISK
2024-03-07 CVE-2024-28115 Unspecified vulnerability in Amazon Freertos
FreeRTOS is a real-time operating system for microcontrollers.
local
low complexity
amazon
7.8
2023-11-21 CVE-2021-27504 Integer Overflow or Wraparound vulnerability in multiple products
Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution.
local
low complexity
amazon ti CWE-190
7.8
2021-11-17 CVE-2021-43997 Unspecified vulnerability in Amazon Freertos
FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege.
local
low complexity
amazon
7.8
2018-12-06 CVE-2018-16601 Integer Underflow (Wrap or Wraparound) vulnerability in Amazon web Services Freertos and Freertos
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component.
network
high complexity
amazon CWE-191
8.1
2018-12-06 CVE-2018-16526 Unspecified vulnerability in Amazon web Services Freertos and Freertos
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.
network
high complexity
amazon
8.1
2018-12-06 CVE-2018-16525 Unspecified vulnerability in Amazon web Services Freertos and Freertos
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.
network
high complexity
amazon
8.1
2018-12-06 CVE-2018-16523 Divide By Zero vulnerability in Amazon web Services Freertos and Freertos
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.
network
high complexity
amazon CWE-369
7.4