Out-of-Bounds Read Vulnerability in NetX Duo from Eclipse Foundation

CVE-2025-55093

What is CVE-2025-55093?

Inversions of NetX Duo prior to version 6.4.4 contain a vulnerability within the networking support module that handles unicast DHCP messages. Specifically, the function _nx_ipv4_packet_receive() is susceptible to an out-of-bounds read, which can potentially lead to the corruption of 4 bytes of memory. This flaw can be exploited under certain circumstances, emphasizing the need for prompt updates to secure the affected products.

References