CVE-2025-55091
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Analyzed - emo@eclipse.org
- Published
- 2025-10-16
- Last modified
- 2026-10-08
- Weaknesses
- CWE-125, CWE-126
Affected products
References
- https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pf5q-r6q5-6j2f
