Integer Underflow Vulnerability in Eclipse ThreadX NetX Duo HTTP Server

CVE-2025-2258

What is CVE-2025-2258?

The Eclipse ThreadX NetX Duo component's HTTP server is susceptible to an integer underflow vulnerability. Attackers can exploit this flaw by sending specially crafted packets with a Content-Length that is smaller than the actual data request size, which can lead to a denial of service condition. This issue persists despite a previous fix attempt in CVE-2025-0728. To mitigate the risk, administrators may consider disabling HTTP PUT functionality as a temporary workaround.

References