6.9Medium
CVE-2025-55083Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()
Description
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.
Weakness (CWE):
CWE-126
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Eclipse Foundation | NetX Duo | < 6.4.4 | |
| eclipse | threadx netx duo | < 6.4.4.202503 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:eclipse:threadx_netx_duo:*:*:*:*:*:*:*:*< 6.4.4.202503