Beveiligingsadvies

CVE-2024-2212

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-26 15:58:27
Laatst bijgewerkt 2025-02-13 17:33:30
Toegewezen door eclipse
CVSS-score 7.3
Status PUBLISHED

Beschrijving

In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wraparound, under-allocations and heap buffer overflows.