CVE-2025-55078: Incomplete validation of kernel object pointers in system calls
In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Eclipse ThreadXto a version that resolves this vulnerability.Fixed in 6.4.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55078?
CVE-2025-55078 is classified as a denial of service vulnerability that can crash affected systems.
How do I fix CVE-2025-55078?
To resolve CVE-2025-55078, update Eclipse ThreadX to version 6.4.3 or later.
Who is affected by CVE-2025-55078?
CVE-2025-55078 affects Eclipse ThreadX versions prior to 6.4.3.
What types of attacks can exploit CVE-2025-55078?
Attackers can exploit CVE-2025-55078 by supplying a pointer to a reserved or unmapped memory region.
What can happen if CVE-2025-55078 is exploited?
Exploiting CVE-2025-55078 can lead to a denial of service, causing the affected application to crash.