Eclipse Foundation USBX vulnerabilities

Latest Eclipse Foundation USBX CVEs

Newest publication first

1. CVE-2025-55100 Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()

   Published 2025-10-17

   Low·CVSS 2.4 EPSS 0.56%

   In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.

2. CVE-2025-55099 Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()

   Published 2025-10-17

   Low·CVSS 2.4 EPSS 0.34%

   In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.

3. CVE-2025-55098 Potential out-of-bounds read in _ux_host_class_audio_device_type_get()

   Published 2025-10-17

   Low·CVSS 1.0 EPSS 0.29%

   In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device.

4. CVE-2025-55097 Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()

   Published 2025-10-17

   Low·CVSS 2.4 EPSS 0.27%

   In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming device.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.