CVE-2025-55092: Eclipse Threadx Netx Duo

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option.

Affected products

• Eclipse Threadx Netx Duo: before 6.4.4.202503 (fixed in 6.4.4.202503)

Published 2025-10-17. Last modified 2026-10-09.