Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2025-55096

Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()

Description

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get()  when parsing a descriptor of an USB HID device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation NetX Duo

Default version status: unaffected

  • 0 to < 6.4.3affected

References