Eclipse
Eclipse Threadx Usbx: vulnerabilidades y CVE
Eclipse Threadx Usbx tiene 15 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 9 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses6
Críticas9
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-55095 | Alta (7) | 0.17% | — | 27 ene 2026 | The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself… |
| CVE-2025-55100 | Baja (2.4) | 0.56% | — | 17 oct 2025 | In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies. |
| CVE-2025-55099 | Baja (2.4) | 0.38% | — | 17 oct 2025 | In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with… |
| CVE-2025-55097 | Baja (2.4) | 0.27% | — | 17 oct 2025 | In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming… |
| CVE-2025-55096 | Baja (2.1) | 0.17% | — | 17 oct 2025 | In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get() when parsing a descriptor of an USB HID device. |
| CVE-2025-55098 | Baja (1) | 0.33% | — | 17 oct 2025 | — |
| CVE-2023-48698 | Crítica (9.8) | 0.93% | — | 5 dic 2023 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities… |
| CVE-2023-48697 | Crítica (9.8) | 1.2% | — | 5 dic 2023 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities… |
| CVE-2023-48696 | Crítica (9.8) | 0.95% | — | 5 dic 2023 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities… |
| CVE-2023-48695 | Crítica (9.8) | 1.2% | — | 5 dic 2023 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in… |
| CVE-2023-48694 | Crítica (9.8) | 1.3% | — | 5 dic 2023 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type… |
| CVE-2022-39293 | Crítica (9.8) | 0.72% | — | 13 oct 2022 | Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. The case is, in… |
| CVE-2022-36063 | Crítica (9.8) | 1.7% | — | 10 oct 2022 | Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host… |
| CVE-2022-29246 | Crítica (9.8) | 2.3% | — | 24 may 2022 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory… |
| CVE-2022-29223 | Crítica (9.8) | 1.2% | — | 24 may 2022 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with… |