In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasnt verifying whether the pointer is outside the module memory region.
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Threadx | Eclipse | * | 6.4.3 (excluding) |