CVE-2025-5688CWE-787

Out of Bounds Write in FreeRTOS-Plus-TCP

High · published June 4, 2025

CVSS v4.0
7.5
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled.

Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-06-04T17:09Z
EPSS history
Timeline
  • 04 JUN 17:09Z
    Out of Bounds Write in FreeRTOS-Plus-TCP
    cvelistv5