PT-2025-42439 · Eclipse Foundation · Thread+1

Justin Stauffer · Published 2025-10-16 · Updated 2025-10-21 · CVE-2025-55091

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4

Description The networking support module for Eclipse Foundation ThreadX contains a potential out-of-bounds read issue. This issue occurs in the nx ip packet receive() function when processing an Ethernet frame with the IP type set but lacking IP data.

Recommendations Update to version 6.4.4 or later.

Fix

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

CVE-2025-55091

GHSA-PF5Q-R6Q5-6J2F

Affected Products

Netx Duo

Thread

References · 6

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pf5q-r6q5-6j2f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55091 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55091 · Vendor Advisory
• https://t.me/cveNotify/139665 · Telegram Post
• https://twitter.com/CVEnew/status/1978926634087375273 · Twitter Post
• https://t.me/CVEtracker/35065 · Telegram Post