Eclipse Threadx vulnerabilities

• eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 more The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally call… CVE-2026-11576 7.5 HighJune 19, 2026
• eclipse threadx The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_… CVE-2026-0648 7.8 HighJanuary 27, 2026
• eclipse threadx usbx, eclipse foundation threadx - usbx +1 more The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi… CVE-2025-55095 4.2 MediumJanuary 27, 2026
• eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 more A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source… CVE-2025-55102 8.7 HighJanuary 27, 2026
• eclipse threadx netx duo, eclipse foundation nextx duo +1 more In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a… CVE-2025-55086 6.3 MediumOctober 20, 2025
• eclipse threadx netx duo, eclipse foundation netx duo +1 more Web http client: Unchecked Server-Side Malicious Packet Issue CVE-2025-55085 8.8 HighOctober 17, 2025
• eclipse foundation nextx duo, eclipse threadx netx duo +1 more In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters. CVE-2025-55087 6.3 MediumOctober 17, 2025
• eclipse foundation usbx, eclipse threadx usbx +1 more Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func() CVE-2025-55100 2.4 LowOctober 17, 2025
• eclipse foundation usbx, eclipse threadx usbx +1 more Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate() CVE-2025-55099 2.4 LowOctober 17, 2025
• eclipse foundation usbx, eclipse threadx usbx +1 more Potential out-of-bounds read in _ux_host_class_audio_device_type_get() CVE-2025-55098 1.0 LowOctober 17, 2025
• eclipse foundation usbx, eclipse threadx usbx +1 more Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get() CVE-2025-55097 2.4 LowOctober 17, 2025
• eclipse threadx usbx, eclipse foundation netx duo +1 more Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get() CVE-2025-55096 2.1 LowOctober 17, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Potential out-of-bounds read in _nx_icmpv6_validate_options() CVE-2025-55094 6.9 MediumOctober 17, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages CVE-2025-55093 6.9 MediumOctober 17, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Potential out of bound read in _nx_ipv4_option_process() CVE-2025-55092 6.9 MediumOctober 17, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Potential out of bound read in _nx_ip_packet_receive() CVE-2025-55091 6.9 MediumOctober 16, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo CVE-2025-55090 6.9 MediumOctober 16, 2025
• eclipse threadx filex, eclipse foundation filex +1 more Eclipse ThreadX FileX RAM disk driver buffer overflow CVE-2025-55089 9.2 CriticalOctober 16, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension() CVE-2025-55084 6.9 MediumOctober 16, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension() CVE-2025-55083 6.9 MediumOctober 15, 2025
• eclipse foundation netx duo, eclipse threadx netx duo +1 more Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find() CVE-2025-55082 6.9 MediumOctober 15, 2025
• eclipse threadx netx duo, eclipse foundation netx duo +1 more Potential out of bound read in _nx_secure_tls_process_clienthello() CVE-2025-55081 6.9 MediumOctober 15, 2025
• eclipse threadx Improper Parameter Check in ThreadX Syscall Implementation CVE-2025-55080 7.2 HighOctober 15, 2025
• eclipse threadx Missing check for thread priority CVE-2025-55079 5.7 MediumOctober 15, 2025
• eclipse threadx Incomplete validation of kernel object pointers in system calls CVE-2025-55078 5.7 MediumOctober 14, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow CVE-2025-2259 5.3 MediumApril 6, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo HTTP component server denial of service CVE-2025-2260 7.1 HighApril 6, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CVE-2025-2258 5.3 MediumApril 6, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CVE-2025-0727 5.3 MediumFebruary 21, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CVE-2025-0728 5.3 MediumFebruary 21, 2025
• eclipse threadx netx duo, eclipse foundation threadx +1 more Eclipse ThreadX NetX Duo HTTP server denial of service CVE-2025-0726 7.1 HighFebruary 21, 2025
• eclipse threadx Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() CVE-2024-2212 7.3 HighMarch 26, 2024
• eclipse threadx Missing array size check in _Mtxinit() in the Xtensa port CVE-2024-2214 7.0 HighMarch 26, 2024
• eclipse threadx netx duo, eclipse foundation threadx +1 more Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc() CVE-2024-2452 7.0 HighMarch 26, 2024
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Remote Code Execution Vulnerability CVE-2023-48698 6.8 MediumDecember 5, 2023
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Remote Code Execution Vulnerability CVE-2023-48697 6.4 MediumDecember 5, 2023
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Remote Code Execution Vulnerability CVE-2023-48696 6.7 MediumDecember 5, 2023
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Remote Code Execution Vulnerability CVE-2023-48695 7.2 HighDecember 5, 2023
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Remote Code Execution Vulnerability CVE-2023-48694 6.8 MediumDecember 5, 2023
• azure-rtos usbx, eclipse threadx usbx +1 more Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow CVE-2022-39293 8.6 HighOctober 13, 2022
• azure-rtos usbx, eclipse threadx usbx +1 more USBX Host CDC ECM integer underflow with buffer overflow CVE-2022-36063 7.6 HighOctober 10, 2022
• azure-rtos usbx, eclipse threadx usbx +1 more Potential buffer overflow in function DFU upload in Azure RTOS USBX CVE-2022-29246 9.8 CriticalMay 24, 2022
• azure-rtos usbx, eclipse threadx usbx +1 more Buffer overflow on HUB descriptor in Azure RTOS USBX CVE-2022-29223 7.5 HighMay 24, 2022