Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-55084

Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation NetX Duo

Default version status: unaffected

  • 0 to < 6.4.4affected

References