A vulnerability in FreeRTOS-Kernel versions 10.2.0 through 11.3.0 allows for potential out-of-bounds memory writes, posing a significant risk to system stability and integrity.

This is an out-of-bounds write vulnerability (CWE-787) occurring within the secure context allocation function. An attacker with low privileges can trigger this flaw to cause memory corruption, which may lead to a denial of service or potential code execution in the secure context.

Successful exploitation could lead to system instability, application crashes, or potential compromise of the secure execution environment. Given the CVSS score of 7.3, this is a high-severity issue that could disrupt critical embedded operations if the affected device is exposed to malicious input.

Immediate Action: Update FreeRTOS-Kernel to version 11.3.1 or later to implement the necessary size validation checks.

Proactive Monitoring: Monitor device logs for unexpected crashes or error patterns related to memory management and context switching.

Compensating Controls: Ensure that only trusted inputs are processed by the system and restrict access to the affected interfaces to minimize the attack surface.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to embedded systems relying on FreeRTOS for secure operations. Administrators should prioritize updating to version 11.3.1 immediately to eliminate the risk of out-of-bounds memory corruption.