Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-2214

Missing array size check in _Mtxinit() in the Xtensa port

Description

In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected file was ports/xtensa/xcc/src/tx_clib_lock.c

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation ThreadX

Default version status: unaffected

  • 0 to < 6.4.0affected

References