CVE-2026-7424CWE-191

Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

High · published April 29, 2026

CVSS v4.0
7.2
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP task freeze requiring hardware reset) by sending a single crafted DHCPv6 packet.

The issue is present whenever DHCPv6 is enabled.

To mitigate this issue, users should upgrade to version V4.2.6 or V4.4.1 or newer.

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-04-29T18:51Z
EPSS history
Timeline
  • 29 APR 18:51Z
    Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
    cvelistv5