In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wraparound, under-allocations and heap buffer overflows.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:LEclipse Threadx
APPEclipse< 6.4.0
Powiązane podatności
The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/uti...
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't eno...
In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size...
In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases th...
In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a poin...