by Kastro
Paper/Archive/CVE-2025-55100

CVE-2025-55100

Eclipse Foundation USBX — Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 46.7.467 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.

Affected

ProductAffectedFixed inSource
USBX< 6.4.36.4.3CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
eclipse (CNA)2.4CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

advisorygithub.com/eclipse-threadx/usbx/security/advisories/GHSA-j253-w29r-9m48