6.9
Medium
CVE-2025-55091 In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…
Description
In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetX Duo 6.4 | earliest → < 6.4.4 | 6.4.4 |
Other CVEs of NetX Duo
The 32 CVEs of NetX Duo →
CVE-2026-106465
Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server
6.9
Medium
CVE-2026-106464
Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing
8.7
High
CVE-2026-103415
When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without…
9.3
Critical
CVE-2026-102717
MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash
7.5
High