Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-55093 EUVD-2025-34871

Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages

Published Oct 17, 2025 · Updated Oct 17, 2025 · Assigned by eclipse

Description

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory.

Affected products

VendorProductAffectedFixed
Eclipse Foundation NetX Duo < 6.4.4 6.4.4

Advisories 1

References