Description (CNA)
In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wraparound, under-allocations and heap buffer overflows.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eclipse Foundation / ThreadX | affected 0 before 6.4.0 |
CWE
CWE-122, CWE-190
References
- https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-v9jj-7qjg-h6g6
- http://seclists.org/fulldisclosure/2024/May/35
- http://www.openwall.com/lists/oss-security/2024/05/28/1
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.