Medium · 6.9 CVE-2025-55083 EUVD-2025-34620

Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()

Published Oct 15, 2025 · Updated Oct 27, 2025 · Assigned by eclipse

Vendor: Eclipse Foundation Product: NetX Duo

Description

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.

Affected products

Vendor	Product	Affected	Fixed
Eclipse Foundation	NetX Duo	< 6.4.4	6.4.4

References

https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9hw5-4xcv-jprm