CVE-2025-55078
mediumpriority · track · 22EPSS 0.002 · 7 %ileEUUSEPSS · scored 2026-10-27
In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 1.9–5.7
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://github.com/eclipse-threadx/threadx/releasesPatchcnnvd
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-wcfg-5jpf-hhxqcnnvd
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-wcfg-5jpf-hhxqenisa_euvd
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-wcfg-5jpf-hhxqExploitVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan