Description (CNA)
In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eclipse Foundation / ThreadX | affected 0 before 6.4.0 |
CWE
CWE-120, CWE-190
References
- https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-h963-7vhw-8rpx
- http://seclists.org/fulldisclosure/2024/May/35
- http://www.openwall.com/lists/oss-security/2024/05/28/1
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.