Out of Bound Read Vulnerability in Eclipse Foundation ThreadX USB Support Module
CVE-2025-55098

1LOW

Key Information:

Vendor

Eclipse Foundation

Status
Usbx
Vendor
CVE Published:
17 October 2025

What is CVE-2025-55098?

The USB support module in Eclipse Foundation ThreadX prior to version 6.4.3 contains a security flaw that can result in an out of bound read. This issue arises during the parsing of descriptors from USB audio devices, potentially allowing unauthorized access to memory, leading to application crashes or exposure of sensitive information. Users and administrators are advised to update to the latest version to mitigate this risk effectively.

Affected Version(s)

USBX 0 < 6.4.3

References

https://github.com/eclipse-threadx/usbx/security/advisori...
vendor-advisory

CVSS V4

Score:
1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-55098 : Out of Bound Read Vulnerability in Eclipse Foundation ThreadX USB Support Module