CVE-2018-16523

HIGH 7.4CVE-2018-16523 · Published 06/12/2018 · updated 17/06/2026

In short

CVE-2018-16523 is a HIGH (CVSS 7.4) vulnerability affecting amazon web services freertos (amazon), freertos (amazon).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
amazon web services freertos amazon	`≤ 1.3.1`	No fix yet
freertos amazon	`≤ 10.0.1`	No fix yet

Description

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.

References

blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details · Exploit
blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems · Third Party Advisory
aws/amazon-freertos · Release Notes

More vulnerabilities in amazon web services freertos

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

amazon web services freertos

amazon

≤ 1.3.1

No fix yet

freertos

amazon

≤ 10.0.1

No fix yet

More vulnerabilities in amazon web services freertos

See all →