Skip to content
Sign in
7.3 High

CVE-2024-2212 In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API …

Description

In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wraparound, under-allocations and heap buffer overflows.

Affected products and versions

Product Affected versions Fixed in
ThreadX 6.4 earliest → < 6.4.0 6.4.0
threadx 6.4 earliest → < 6.4.0 6.4.0

Other CVEs of ThreadX

The 14 CVEs of ThreadX →
CVE-2026-102709 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the… 8.4 High CVE-2026-102757 An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,… 8.5 High CVE-2025-55080 In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough,… 7.2 High CVE-2025-55079 In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority 5.7 Medium
Track this CVE