Skip to content
OpenAdvisories
Low · 2.1 CVE-2025-55096 EUVD-2025-34868

Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()

Published Oct 17, 2025 · Updated Oct 17, 2025 · Assigned by eclipse

Description

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get()
 when parsing a descriptor of an USB HID device.

Affected products

VendorProductAffectedFixed
Eclipse Foundation NetX Duo < 6.4.3 6.4.3

References