Product by Eclipse Foundation

    Eclipse ThreadX - USBX

    15 known vulnerabilities in Eclipse ThreadX - USBX (Eclipse Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eclipse ThreadX - USBX (Eclipse Foundation)
    CriticalCVE-2022-29246

    Potential buffer overflow in function DFU upload in Azure RTOS USBX

    also in 1 other product

    9.8
    CriticalCVE-2022-36063

    USBX Host CDC ECM integer underflow with buffer overflow

    also in 1 other product

    7.6
    CriticalCVE-2023-48694

    Azure RTOS USBX Remote Code Execution Vulnerability

    also in 1 other product

    6.8
    CriticalCVE-2023-48695

    Azure RTOS USBX Remote Code Execution Vulnerability

    also in 1 other product

    7.2
    CriticalCVE-2022-29223

    Buffer overflow on HUB descriptor in Azure RTOS USBX

    also in 1 other product

    7.5
    CriticalCVE-2025-55100

    Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()

    also in 1 other product

    9.1
    CriticalCVE-2023-48697

    Azure RTOS USBX Remote Code Execution Vulnerability

    also in 1 other product

    6.4
    CriticalCVE-2022-39293

    Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow

    also in 1 other product

    8.6
    CriticalCVE-2023-48698

    Azure RTOS USBX Remote Code Execution Vulnerability

    also in 1 other product

    6.8
    CriticalCVE-2023-48696

    Azure RTOS USBX Remote Code Execution Vulnerability

    also in 1 other product

    6.7
    HighCVE-2025-55095

    Eclipse ThreadX - USBX: Stack-based Buffer Overflow

    also in 1 other product

    7.0
    MediumCVE-2025-55099

    Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()

    also in 1 other product

    6.1
    MediumCVE-2025-55098

    Potential out-of-bounds read in _ux_host_class_audio_device_type_get()

    also in 1 other product

    6.1
    MediumCVE-2025-55097

    Potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()

    also in 1 other product

    6.1
    MediumCVE-2025-55096

    Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()

    also in 1 other product

    6.1

    All products by Eclipse Foundation