CVE-2025-55098

Potential out-of-bounds read in _ux_host_class_audio_device_type_get()

State
Published
Severity
1.0 Low
Published
Oct 17, 2025
Updated
Oct 17, 2025
Reserved
Aug 6, 2025

Read the record on cve.org

Description

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device.

Scores

CVSSScoreVectorSource
4.01.0 LowCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:Neclipse

Weaknesses

Affected Products

ProductVersions
USBXEclipse Foundation
  • before 6.4.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.