CVE-2025-55097
BaseFortify
Publication date: 2025-10-17
Last updated on: 2025-10-23
Assigner: Eclipse Foundation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| eclipse | threadx_usbx | to 6.4.3.202503 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential out of bound read issue in the USBX software (before version 6.4.3), specifically in the function _ux_host_class_audio_streaming_sampling_get(). It occurs when parsing a descriptor of a USB streaming device, which could lead to reading memory outside the intended bounds.
How can this vulnerability impact me? :
The impact of this vulnerability is likely limited due to its low CVSS score (2.4). It could cause improper memory reads when handling USB audio streaming devices, potentially leading to application instability or crashes, but it does not indicate privilege escalation or remote code execution.