CVE-2026-77237 - Missing type validation in xQueueAddToSet in FreeRTOS-Kernel
Brief
CVE ID : CVE-2026-77237
Published : Aug. 21, 2026, 6:16 p. m.
- 53 minutes ago
Description : Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.
- 1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.
- 1 or later.
Severity: 8.2
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...