CVE-2025-5688

7.5 highEPSS 0.4%

High (7.5). EPSS 0.4% chance of exploitation in the next 30 days.

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

Severity

CVSS 4.0

7.5 high

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2025-06-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://aws.amazon.com/security/security-bulletins/AWS-2025-012/
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.2
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-5x4f-fvv8-wr65

Check your stack JSON