Skip to content
OpenAdvisories
Medium · 5.7 CVE-2025-55078 EUVD-2025-34143

Incomplete validation of kernel object pointers in system calls

Published Oct 14, 2025 · Updated Oct 14, 2025 · Assigned by eclipse

Description

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.

Affected products

VendorProductAffectedFixed
Eclipse Foundation ThreadX ≤ 6.4.2 —

References