CVE-2024-2452highCWE-120CWE-190

CVE-2024-2452: falha de alta gravidade em Eclipse Foundation ThreadX

Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Eclipse ThreadX

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.9%
In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
Eclipse Foundation · ThreadX
CVEs relacionadas — Eclipse Foundation ThreadX

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2259MEDIUMEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowEPSS 1.0%CVE-2025-2260HIGHEclipse ThreadX NetX Duo HTTP component server denial of serviceEPSS 1.0%CVE-2025-2258MEDIUMEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowEPSS 1.0%CVE-2025-0728MEDIUMEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowEPSS 0.8%CVE-2025-0727MEDIUMEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowEPSS 0.8%CVE-2025-0726HIGHEclipse ThreadX NetX Duo HTTP server denial of serviceEPSS 0.8%