Skip to content

Vulnerabilities of Eclipse Foundation ThreadX

Is your version affected?

CVE Summary Score Published
CVE-2026-102709 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the… 8.4 High Sep 29, 2026
CVE-2026-102757 An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,… 8.5 High Sep 29, 2026
CVE-2025-55080 In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough,… 7.2 High Oct 15, 2025
CVE-2025-55079 In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority 5.7 Medium Oct 15, 2025
CVE-2025-55078 In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a… 5.7 Medium Oct 14, 2025
CVE-2025-2259 In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer… 5.3 Medium Apr 6, 2025
CVE-2025-2260 In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of… 7.1 High Apr 6, 2025
CVE-2025-2258 In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause… 5.3 Medium Apr 6, 2025
CVE-2025-0727 In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer… 5.3 Medium Feb 21, 2025
CVE-2025-0728 In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer… 5.3 Medium Feb 21, 2025
CVE-2025-0726 In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of… 7.1 High Feb 21, 2025
CVE-2024-2212 In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API … 7.3 High Mar 26, 2024
CVE-2024-2214 In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check… 7.0 High Mar 26, 2024
CVE-2024-2452 In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could… 7.0 High Mar 26, 2024

Other Eclipse Foundation products