Threadx (Eclipse Foundation) - vulnerabilities (CVEs)
14 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-09-29. Vendor: Eclipse Foundation.
CVEs of Threadx
- CVE-2026-102709 - CVSS 8.4 (high), 2026-09-29: Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the…
- CVE-2026-102757 - CVSS 8.5 (high), 2026-09-29: An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that…
- CVE-2025-55080 - CVSS 7.2 (high), 2025-10-15: In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary…
- CVE-2025-55079 - CVSS 5.7 (medium), 2025-10-15: In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't…
- CVE-2025-55078 - CVSS 5.7 (medium), 2025-10-14: In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region.…
- CVE-2025-2260 - CVSS 7.5 (high), 2025-04-06: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets.…
- CVE-2025-2259 - CVSS 7.5 (high), 2025-04-06: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of…
- CVE-2025-2258 - CVSS 7.5 (high), 2025-04-06: In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent…
- CVE-2025-0728 - CVSS 7.5 (high), 2025-02-21: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of…
- CVE-2025-0727 - CVSS 7.5 (high), 2025-02-21: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of…
- CVE-2025-0726 - CVSS 7.5 (high), 2025-02-21: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets.…
- CVE-2024-2452 - CVSS 9.8 (critical), 2024-03-26: In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an…
- CVE-2024-2214 - CVSS 7.8 (high), 2024-03-26: In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected…
- CVE-2024-2212 - CVSS 7.8 (high), 2024-03-26: In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API…
