CVE-2025-55078 — Incomplete validation of kernel object pointers in system calls
In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system call…
Published: 2025-10-14 · CVSS: 5.7 · CVSS 4.0
In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7