Freertos

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Freertos product.

RSS Feeds for Freertos security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Freertos products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Freertos Sorted by Most Security Vulnerabilities since 2018

Freertos Kernel7 vulnerabilities

Freertos Coremqtt1 vulnerability

By the Year

In 2026 there have been 8 vulnerabilities in Freertos with an average score of 7.7 out of ten.

Year	Vulnerabilities	Average Score
2026	8	7.69

It may take a day or so for new Freertos vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Freertos Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-119086	Oct 30, 2026	FreeRTOS-Kernel <11.3.3 Queue-Set Stack Overflow PrivEsc Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary. To remediate this issue, users should upgrade to FreeRTOS-Kernel V11.3.3, rebuild, and reflash affected firmware. Builds that do not enable queue sets are not affected.	Freertos Kernel
CVE-2026-109588	Oct 16, 2026	FreeRTOS-Kernel <11.3.2 Numeric Truncation in MPU Buffer Check Allows PrivEsc Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.	Freertos Kernel
CVE-2026-109587	Oct 16, 2026	FreeRTOS-Kernel MPU auth bypass (preV11.3.2) Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.	Freertos Kernel
CVE-2026-77237	Aug 21, 2026	FreeRTOS-Kernel <11.3.1 QueueSet Access Validation Bug Unlocks Privileged Memory Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.	Freertos Kernel
CVE-2026-77236	Aug 21, 2026	FreeRTOSKernel 11.3.0: Heap Metadata OOB via Undersized Stack Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.	Freertos Kernel
CVE-2026-77235	Aug 21, 2026	UAF via Missing Priv Verif in Secure Context Clean FreeRTOS-Kernel <11.3.1 Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.	Freertos Kernel
CVE-2026-77234	Aug 21, 2026	FreeRTOS Kernel <11.3.1 Improper Input Validation Enables Privileged Execution Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.	Freertos Kernel
CVE-2026-8686	May 15, 2026	coreMQTT v5.0.1 DOS via Missing Bounds Validation in MQTT v5.0 Prop Parser Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.	Coremqtt