Read the docs

Eclipse Foundation

Records467All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical78CVSS 9.0–10.0
CVSS high203CVSS 7.0–8.9

Exploited now

Eclipse Foundation records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Threadx Usbx · all components

Priority HIGH 75

Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02187 Published 2022-10-10 Fixed in 6.1.12 CWE-121
Priority MEDIUM 46

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01332 Published 2023-12-05 Fixed in 6.3.0 CWE-825
Priority MEDIUM 45

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00931 Published 2023-12-05 Fixed in 6.3.0 CWE-754
Priority MEDIUM 45

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01185 Published 2023-12-05 Fixed in 6.3.0 CWE-476
Priority MEDIUM 45

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01228 Published 2023-12-05 Fixed in 6.3.0 CWE-787
Priority MEDIUM 44

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00946 Published 2023-12-05 Fixed in 6.3.0 CWE-754
Priority LOW 30

The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00169 Published 2026-01-27 No fix listed CWE-121
Priority LOW 13

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.

CVSS 4.0LOW 2.4 Physical No auth User interaction EPSS 0.00562 Published 2025-10-17 Fixed in 6.4.3 CWE-125
Priority LOW 12

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-contro…

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00344 Published 2025-10-17 Fixed in 6.4.3 CWE-125
Priority LOW 12

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming de…

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00269 Published 2025-10-17 Fixed in 6.4.3 CWE-125
Priority LOW 7

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00294 Published 2025-10-17 Fixed in 6.4.3 CWE-125
Open these records in search →