Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-55091

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.

Published

2025-10-16T08:15:36.093

Last Modified

2025-10-21T17:09:46.400

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-125
    CWE-126
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application eclipse threadx_netx_duo < 6.4.4.202503 Yes
References