CVE-2025-55080 Improper Parameter Check in ThreadX Syscall Implementation

What is CVE-2025-55080?

CVE-2025-55080 is a high-severity memory corruption vulnerability in Eclipse Foundation ThreadX, published on 15 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

Weakness: CWE-233

Which versions are affected by CVE-2025-55080?

It affects 1 product.

Products include Eclipse Threadx.

How do I fix CVE-2025-55080?

No fix has been published for CVE-2025-55080 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-55080 being exploited?

There is no known exploitation of CVE-2025-55080 in the wild and no public exploit code.

Other vulnerabilities in Eclipse Foundation ThreadX

• CVE-2026-0648 Memory corruption in Eclipse ThreadX High 7.8
• CVE-2024-2212 Integer overflow in ThreadX High 7.3
• CVE-2024-2214 Missing array size check in _Mtxinit() in the Xtensa port High 7.0
• CVE-2025-55079 Missing check for thread priority Medium 5.7
• CVE-2025-55078 Incomplete validation of kernel object pointers in system calls Medium 5.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-76hh-wrj5-hr2v.