What’s Vulnerable › Vulnerabilities
CVE-2025-55083: Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension()
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-15 · updated 2026-10-08
- Weakness: CWE-126
Description
In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.
Affected products
- Eclipse Foundation NetX Duo: before 6.4.4.202503 — fixed in 6.4.4.202503
How to fix
Upgrade to a fixed version: Eclipse Foundation NetX Duo 6.4.4.202503. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-55083 or the next vulnerability affects your stack