7.2Hoch
CVE-2025-55080Improper Parameter Check in ThreadX Syscall Implementation
Beschreibung
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
Schwachstellentyp (CWE):
CWE-233
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Eclipse Foundation | ThreadX | < 6.4.3 |
Referenzen und Patches
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-76hh-wrj5-hr2v vendor-advisoryThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*< 6.4.3