CVE-2025-55080
CVE-2025-55080 is a high-severity vulnerability in Eclipse Threadx with a CVSS 3.x base score of 7.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-233.
Key facts
- Severity: High (CVSS 3.x base score 7.1)
- CVSS v4: 7.2
- EPSS exploit prediction: 0% (3rd percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-34534
- Weakness: CWE-233
- Affected product: Eclipse Threadx
- Published:
- Last modified:
Description
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
Frequently asked questions
- What is CVE-2025-55080?
- In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.
- How severe is CVE-2025-55080?
- CVE-2025-55080 has a CVSS 3.x base score of 7.1, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.
- Is CVE-2025-55080 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-55080?
- CVE-2025-55080 affects Eclipse Threadx. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-55080?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- Does CVE-2025-55080 have an EU (EUVD) identifier?
- Yes. CVE-2025-55080 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-34534.
- When was CVE-2025-55080 published?
- CVE-2025-55080 was published on 2025-10-15 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:eclipse:threadx:*:*:*:*:*:*:*:*
More vulnerabilities in Eclipse Threadx
- CVE-2026-0648 — High (CVSS 7.8): The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in…
- CVE-2024-2212 — High (CVSS 7.3): In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API…
- CVE-2024-2214 — High (CVSS 7.0): In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check…
- CVE-2025-55079 — Medium (CVSS 5.5): In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check…
- CVE-2025-55078 — Medium (CVSS 5.5): In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a…
All CVEs affecting Eclipse Threadx →
Other CWE-233 vulnerabilities
- CVE-2022-45182 — Critical (CVSS 9.8): Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.
- CVE-2026-32998 — Critical (CVSS 9.4): This vulnerability in Veeam Service Provider Console allows for remote code execution.
- CVE-2024-31808 — High (CVSS 8.8): TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the…
- CVE-2021-0269 — High (CVSS 8.8): The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a…
- CVE-2023-20514 — High (CVSS 8.7): Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an…
- CVE-2021-1230 — High (CVSS 8.6): A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application…