Eclipse Threadx Netx Duo

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse_foundation:eclipse_threadx_-_netx_duo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEclipse Foundation (2c315c48-0111-5572-bbde-cc70cfafb2e9)
ProductEclipse Threadx Netx Duo (8a2b6b26-807a-5a9b-8cbf-170db4521f3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11576 vulnerable 2026-07-29 00:23:31.451276 Details available
HIGH (7.5)
The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally calls fx_file_close() even when the file was never successfully opened. Multiple error branches jump to the shared cleanup label before any file open operation has occurred, causing fx_file_close() to operate on an uninitialized file handle, leading to undefined behavior, double-close issues, or memory corruption.
Published: 2026-06-19T08:27:59.652Z
Updated: 2026-06-22T15:11:32.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55102 vulnerable 2026-06-08 07:33:14.068109 Details available
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Published: 2026-01-27T15:25:36.203Z
Updated: 2026-01-27T15:58:21.021Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.