CVE-2025-55085 — Web http client: Unchecked Server-Side Malicious Packet Issue
In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification.…
Published: 2025-10-17 · CVSS: 8.8 · CVSS 4.0
In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7