Denial of Service Vulnerability in Eclipse ThreadX Software

CVE-2025-55078

What is CVE-2025-55078?

In Eclipse ThreadX versions before 6.4.3, an attacker can exploit a flaw that allows for denial of service attacks. This vulnerability arises when an attacker provides a pointer that references either a reserved or unmapped memory region. While vulnerable system calls implemented checks on pointers, these checks inadequately verified whether the pointers were located outside the allocated memory module, allowing attackers to potentially crash the system and compromise its availability.

References