CVE-2024-2212

概要

参考情報

• seclists.org/fulldisclosure/2024/May/35 · Mailing List
• openwall.com/lists/oss-security/2024/05/28/1 · Mailing List
• eclipse-threadx/threadx security advisory · Exploit

threadx のその他の脆弱性

• CVE-2026-0648中 6.3The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers…
• CVE-2025-55080高 7.1In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to o…
• CVE-2025-55079中 5.5In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priori…
• CVE-2025-55078中 5.5In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped …
• CVE-2024-2214高 7.8In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwr…