Networking Module Vulnerability in Eclipse Foundation's ThreadX

CVE-2025-55086

What is CVE-2025-55086?

In versions of NetXDuo prior to 6.4.4, a vulnerability exists within the networking support module for Eclipse Foundation's ThreadX. This concern specifically arises in the DHCPV6 client, where an unchecked index can lead to unauthorized extraction of the server DUID from the server's reply. By crafting a malicious packet, an attacker may exploit this flaw, potentially resulting in an out-of-bounds memory read.

References