CVE-2026-7425 | AWS FreeRTOS-Plus-TCP up to 4.2.5/4.4.0 Router Advertisement Parser PREFIX_INFORMATION out-of-bounds (GHSA-gffr-xgjg-jh9j / EUVD-2026-26283)

A vulnerability classified as problematic was found in AWS FreeRTOS-Plus-TCP up to 4.2.5/4.4.0. Affected by this vulnerability is an unknown functionality of the component Router Advertisement Parser. Such manipulation of the argument PREFIX_INFORMATION leads to out-of-bounds read. This vulnerability is documented as CVE-2026-7425. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.