CVE-2025-55080Improper Parameter Check in ThreadX Syscall Implementation

Description

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-76hh-wrj5-hr2v vendor-advisoryThird Party Advisory