CVE-2025-55099 — Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() whe…
Published: 2025-10-17 · CVSS: 2.4 · CVSS 4.0
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7