Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-55078

Incomplete validation of kernel object pointers in system calls

Description

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation ThreadX

Default version status: unaffected

  • 0 to ≤ 6.4.2affected

References