PT-2025-42439

CVE-2025-55091

Published

2025-10-16

Updated

2025-10-21

Description by

CVSS 4.0

6.9

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4

Description The networking support module for Eclipse Foundation ThreadX contains a potential out-of-bounds read issue. This issue occurs in the nx ip packet receive() function when processing an Ethernet frame with the IP type set but lacking IP data.

Recommendations Update to version 6.4.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-126: Buffer Over-read

Related identifiers