CVE-2025-55092

Summary

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option.

Affected Software

VendorProductVersion RangeStatus
Eclipse FoundationNetX Duo0 < 6.4.4affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read
  • CWE-126: CWE-126

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References