5.7Mittel
CVE-2025-55079Missing check for thread priority
Beschreibung
In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't performed, allowing, as a result, to obtain a thread with higher priority than expected and causing a possible denial of service.
Schwachstellentyp (CWE):
CWE-770
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Eclipse Foundation | ThreadX | < 6.4.3 |
Referenzen und Patches
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-w8rw-fqgj-9r49 vendor-advisoryExploitThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*< 6.4.3