Memory Corruption Vulnerability in FreeRTOS Kernel

CVE-2026-77236

What is CVE-2026-77236?

A vulnerability exists in the FreeRTOS-Kernel that allows local users to corrupt heap metadata in secure contexts. This issue arises from insufficient minimum size validation during secure allocation processes. An attacker could exploit this by performing an out-of-bounds write with an undersized stack size parameter, potentially compromising system integrity. To mitigate this risk, users are advised to upgrade to version 11.3.1 or later.

References