Skip to content
2.4 Low

CVE-2025-55099 In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…

Description

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.

Affected products and versions

Product Affected versions Fixed in
USBX 6.4 earliest → < 6.4.3 6.4.3

References

Timeline

  1. Published
  2. Last modified
The 4 CVEs of USBX →
Track this CVE