Eclipse Foundation USBX vulnerabilities

4 vulnerabilities

Known vulnerabilities in Eclipse Foundation USBX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-55099eclipse foundationusbx+1
EPSS score
0.38%
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.6.1CVE-2025-55098eclipse foundationusbx+1
EPSS score
0.33%
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device.9.1CVE-2025-55100eclipse foundationusbx+1
EPSS score
0.56%
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.6.1CVE-2025-55097eclipse foundationusbx+1
EPSS score
0.27%
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming device.