Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-55084 EUVD-2025-34716

Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by eclipse

Description

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.

Affected products

VendorProductAffectedFixed
Eclipse Foundation NetX Duo < 6.4.4 6.4.4

References