Out of Bound Read Vulnerability in USBX for Eclipse Foundation ThreadX

CVE-2025-55097

What is CVE-2025-55097?

In USBX prior to version 6.4.3, a vulnerability exists in the USB support module of Eclipse Foundation's ThreadX. This issue can lead to out of bound read scenarios when processing the descriptor of a USB streaming device, potentially exposing sensitive data or causing unexpected behavior in applications relying on USB functionalities. It is crucial for users to review the latest security advisories and update their software to mitigate the risks associated with this vulnerability.

References