CVE-2026-7422

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7422
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7422.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7422
Aliases
  • GHSA-jpw4-6h59-62w9
Published
2026-04-29T18:35:33.797Z
Modified
2026-07-15T01:49:08.470122104Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing
Details

Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address to match one of the device's own registered endpoints, because the loopback detection mechanism skips all input validation for packets whose source MAC matches a local endpoint.

To mitigate this issue, users should upgrade to the fixed version when available.

Database specific 
{
    "cwe_ids": [
        "CWE-290"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7422.json",
    "cna_assigner": "AMZN"
}
References

Affected packages

Git / github.com/freertos/freertos-plus-tcp

Affected ranges

Type
GIT
Repo
https://github.com/freertos/freertos-plus-tcp
Events
Introduced
3e26a338bd1547bbaa6f4965def1a4b152620d3e
Fixed
5986530664073a609e634bde63dd9bff37e725f0
Introduced
dd4d689acc04015e5a2a3ef2cebb6725f55c60be
Fixed
c12361095aca68aeed858f45d14395fbffa92c0d
Database specific 
{
    "cpe": "cpe:2.3:a:amazon:freertos-plus-tcp:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.2.6"
        },
        {
            "introduced": "4.3.0"
        },
        {
            "fixed": "4.4.1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

V4.*
V4.0.0-appsec
V4.2.0
V4.2.1
V4.2.2
V4.2.3
V4.2.4
V4.2.5
V4.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7422.json"