CVE-2025-55093Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages

Description

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649 vendor-advisoryVendor Advisory