7.2Alta
CVE-2025-55080Improper Parameter Check in ThreadX Syscall Implementation
Descripción
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
Debilidad (CWE):
CWE-233
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Eclipse Foundation | ThreadX | < 6.4.3 |
Referencias y parches
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-76hh-wrj5-hr2v vendor-advisoryThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*< 6.4.3