CVE-2025-55080

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-55080

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55080.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-55080

Aliases

GHSA-76hh-wrj5-hr2v

Published

2025-10-15T05:41:50.536Z

Modified

2026-07-15T01:48:52.888699629Z

Severity

7.2 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Improper Parameter Check in ThreadX Syscall Implementation

Details

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55080.json",
    "cna_assigner": "eclipse",
    "cwe_ids": [
        "CWE-233"
    ]
}

References

Affected packages

Git / github.com/eclipse-threadx/threadx

Affected ranges

Type

GIT

Repo

https://github.com/eclipse-threadx/threadx

Events

Introduced

Fixed

c4ad279b85fcf836c0b42d3e140fc32f0554e7b5

Database specific

{
    "cpe": "cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.4.3"
        }
    ]
}

Affected versions

v6.*

v6.0.1_rel

v6.0.2_rel

v6.0_rel

v6.1.10_rel

v6.1.11_rel

v6.1.12_rel

v6.1.1_rel

v6.1.2_rel

v6.1.3_rel

v6.1.5_rel

v6.1.6_rel

v6.1.7_rel

v6.1.8_rel

v6.1.9_rel

v6.1_rel

v6.2.0_rel

v6.2.1_rel

v6.3.0_rel

v6.4.0_rel

v6.4.1_rel

v6.4.2_rel

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55080.json"