PT-2025-42798

CVE-2025-55086

Published

2025-10-20

Updated

2025-10-20

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetXDuo versions prior to 6.4.4

Description An issue exists in the DHCPV6 client within the networking support module for Eclipse Foundation ThreadX. Specifically, an unchecked index during the extraction of the server DUID from server replies can lead to an out-of-memory read condition. An attacker could potentially exploit this with a crafted packet.

Recommendations Update to version 6.4.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input

Related identifiers