CVE-2025-55095
Quick assessment
Affected
Eclipse Foundation Eclipse ThreadX - USBX
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Eclipse ThreadX USBX是Eclipse ThreadX开源的一个USB主机、设备和移动嵌入式堆栈。 Eclipse ThreadX USBX存在安全漏洞，该漏洞源于_ux_host_class_storage_media_mount函数递归深度无限制，可能导致栈溢出。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-55095
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition.
This recursion occurs in _ux_host_class_storage_partition_read(), which parses up to four partition entries. If an extended partition is found (with type UX_HOST_CLASS_STORAGE_PARTITION_EXTENDED or EXTENDED_LBA_MAPPED), the code invokes:
_ux_host_class_storage_media_mount(storage, sector + _ux_utility_long_get(...));
There is no limit on the recursion depth or tracking of visited sectors. As a result, a malicious or malformed disk image can include cyclic or excessively deep chains of extended partitions, causing the function to recurse until stack overflow occurs.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Eclipse ThreadX USBX 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Eclipse ThreadX USBX是Eclipse ThreadX开源的一个USB主机、设备和移动嵌入式堆栈。 Eclipse ThreadX USBX存在安全漏洞，该漏洞源于_ux_host_class_storage_media_mount函数递归深度无限制，可能导致栈溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Eclipse Foundation | Eclipse ThreadX - USBX | 0 ~ 6.4.2 | - |
|
II. Public POCs for CVE-2025-55095
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-55095
请登录查看更多情报信息。
Same Patch Batch · Eclipse Foundation · 2026-01-27 · 3 CVEs total
| CVE-2026-0648 | 7.8 HIGH | Eclipse ThreadX USBX 安全漏洞 |
| CVE-2025-55102 | Eclipse ThreadX NetX Duo 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-121
-
CVE-2026-68960
SKYSEA Client View/IT Manager堆栈缓冲区溢出漏洞 -
CVE-2026-76071
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Pa -
CVE-2026-76070
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Passw -
CVE-2026-78169
UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy -
CVE-2026-78050
Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-
V. Comments for CVE-2025-55095
No comments yet