CVE-2025-55080

Summary

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

Affected Software

VendorProductVersion RangeStatus
Eclipse FoundationThreadX0 < 6.4.3affected

Weaknesses

  • CWE-233: CWE-233 Improper Handling of Parameters

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References