CVE-2018-16526

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.

• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/Exploit, Third Party Advisory
• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/Third Party Advisory
• https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/Exploit, Third Party Advisory
• https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/Third Party Advisory
• https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.mdRelease Notes, Third Party Advisory

Published

Dec 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1652IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 thro…6.2
• CVE-2018-16521An XML External Entity (XXE) vulnerability exists in HTML Fo…
• CVE-2018-16522Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an unin…
• CVE-2018-16523Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16524Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16525Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16527Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS u…
• CVE-2018-16528Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remo…
• CVE-2018-16529A password reset vulnerability has been discovered in Forcep…9.8
• CVE-2018-1653IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…5.4
• CVE-2018-16530A stack-based buffer overflow in Forcepoint Email Security v…9.8
• CVE-2018-16531Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…