CVE-2025-55080: Improper Parameter Check in ThreadX Syscall Implementation
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Eclipse ThreadXto a version that resolves this vulnerability.Fixed in 6.4.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55080?
CVE-2025-55080 is classified as a critical vulnerability due to its potential for arbitrary memory read/write exploitation.
How do I fix CVE-2025-55080?
To mitigate CVE-2025-55080, upgrade Eclipse ThreadX to version 6.4.3 or later.
What are the affected versions of Eclipse ThreadX for CVE-2025-55080?
CVE-2025-55080 affects all versions of Eclipse ThreadX prior to 6.4.3.
What kind of attack does CVE-2025-55080 allow?
CVE-2025-55080 allows an attacker to exploit insufficient syscall parameters verification for arbitrary memory manipulation.
Is memory protection sufficient in Eclipse ThreadX versions before 6.4.3 for CVE-2025-55080?
No, memory protection is not sufficient in Eclipse ThreadX versions before 6.4.3 due to inadequate syscall parameters verification.