Memory Overwrite Vulnerability in Eclipse ThreadX Before Version 6.4.0

CVE-2024-2214

What is CVE-2024-2214?

A vulnerability has been identified in Eclipse ThreadX prior to version 6.4.0, specifically in the Xtensa port. The issue arises from the _Mtxinit() function, which lacks an array size check, resulting in potential memory overwrite conditions. This flaw is located in the file tx_clib_lock.c, specifically within the Xtensa porting layer. Exploitation of this vulnerability could enable malicious actors to manipulate memory, potentially leading to application instability or unauthorized access to sensitive data.

References