Out of Bound Read Vulnerability in NetX Duo Networking Module by Eclipse Foundation

CVE-2025-55091

What is CVE-2025-55091?

In the NetX Duo networking support module for the Eclipse Foundation's ThreadX, a vulnerability has been identified that allows for potential out of bounds reading. This issue occurs in the _nx_ip_packet_receive() function when the module processes an Ethernet frame falsely identified as containing IP data without any actual IP content. Such conditions can lead to unpredicted behavior and can threaten the integrity of the network communications handled by the affected version of the software.

References