CNNVD-202510-2428 Information
Oct 17, 2025
cve
CNNVD ID
CNNVD-202510-2428
Related CVE
- CNNVD Published: 2025-10-17
Description (Chinese)
Eclipse ThreadX NetX Duo是Eclipse ThreadX开源的一个 IPv4 和 IPv6 双重网络堆栈。 Eclipse ThreadX NetX Duo 6.4.4之前版本存在安全漏洞，该漏洞源于处理单播DHCP消息时_nx_ipv4_packet_receive函数存在潜在越界读取问题，可能导致4字节内存损坏。
Description (English)
Eclipse ThreadX NetX Duo is a dual IPv4 and IPv6 network stack of Eclipse ThreadX open sources. Eclipse ThreadX NetX Duo 6.4.4 has a security loophole, which stems from potential cross-border reading problems in the nx ipv4 packet receive function at the time of processing DHCP news.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Eclipse ThreadX
Published
2025-10-17
Last Modified
2026-02-24
References
https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649 https://access.redhat.com/security/cve/cve-2025-55093
Patch
https://github.com/eclipse-threadx/netxduo/releases
Share on: