Skip to content
OpenAdvisories
High · 7.3 CVE-2024-2212 EUVD-2024-27171

Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()

Published Mar 26, 2024 · Updated Feb 13, 2025 · Assigned by eclipse

Description

In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet()
functions from the FreeRTOS compatibility API
(utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing
parameter checks. This could lead to integer wraparound,
under-allocations and heap buffer overflows.

Affected products

VendorProductAffectedFixed
Eclipse Foundation ThreadX < 6.4.0 6.4.0

References