Priority HIGH 70
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but…
Eclipse Foundation
Records467All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical78CVSS 9.0–10.0
CVSS high203CVSS 7.0–8.9
Exploited now
Eclipse Foundation records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
21 records in Threadx Netx Duo · all components
Priority MEDIUM 47
In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification.
Priority MEDIUM 44
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo.
TI-2024-02278 CVE-2024-2452
Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()
Priority MEDIUM 44
In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected.
TI-2026-09997 CVE-2026-11576
Double free in Eclipse ThreadX - NetX Duo
Priority LOW 39
The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally calls fx_file_close() ev…
Priority LOW 37
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_validate_options() when handling a packet with ICMP6 options.
TI-2025-34779 CVE-2025-55090
Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo
Priority LOW 37
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4…
Priority LOW 37
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and com…
TI-2025-34782 CVE-2025-55093
Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages
Priority LOW 36
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corr…
Priority LOW 36
In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with th…
TI-2025-34774 CVE-2025-55084
Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()
Priority LOW 36
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.
TI-2025-34772 CVE-2025-55082
Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find()
Priority LOW 36
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clienthello() because of a missing validation of PSK length provided in the…
Priority LOW 33
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets.
Priority LOW 33
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets.
TI-2025-34773 CVE-2025-55083
Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()
Priority LOW 30
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.
Priority LOW 28
In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.
Priority LOW 28
In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply.
TI-2025-01984 CVE-2025-2259
Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow
Priority LOW 26
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets…
TI-2025-01983 CVE-2025-2258
Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
Priority LOW 26
In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially c…
TI-2025-00619 CVE-2025-0728
Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
Priority LOW 25
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets…
TI-2025-00618 CVE-2025-0727
Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow
Priority LOW 25
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets…