CVE-2024-2212

Name of the Vulnerable Software and Affected Versions Eclipse ThreadX versions prior to 6.4.0

Description The issue arises from missing parameter checks in the xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API. This could lead to integer wraparound, under-allocations, and heap buffer overflows.

Recommendations For Eclipse ThreadX versions prior to 6.4.0, update to version 6.4.0 or later to resolve the issue. As a temporary workaround, consider disabling the xQueueCreate() and xQueueCreateSet() functions until a patch is available. Restrict access to the FreeRTOS compatibility API to minimize the risk of exploitation.