Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

threadx — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in threadx, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the ThreadX real-time operating system, specifically focusing on software weaknesses and their corresponding vendor advisories. The collection encompasses a broad spectrum of flaws, including memory corruption issues, race conditions, and logic errors, covering disclosures from the early 2010s through recent updates. Readers can utilize this resource to track the vendor’s advisory history, analyze specific weakness classes within embedded systems, or review the complete vulnerability timeline for this product. By consolidating data from multiple sources, the page provides a structured view of how security issues have evolved over time. This allows developers and security professionals to identify recurring patterns, assess the frequency of specific bug types, and understand the remediation strategies employed by the vendor. The aggregation supports risk assessment for organizations relying on ThreadX in their embedded architectures, offering insights into potential attack surfaces without requiring manual searches across disparate databases. The data is presented to facilitate technical analysis, enabling users to correlate specific vulnerability reports with broader trends in operating system security. This centralized view helps stakeholders prioritize patching efforts and understand the long-term stability of the software stack.

Vendor: azure-rtos

CVE ID Title CVSS Severity Published
CVE-2026-102709 Arm TrustZone-M NS指针校验漏洞 CWE-200 8.4 High 2026-09-29
CVE-2026-102757 ThreadX模块权限提升漏洞 CWE-125 8.5 High 2026-09-29
CVE-2025-55080 Improper Parameter Check in ThreadX Syscall Implementation CWE-233 9.1AI Critical AI 2025-10-15
CVE-2025-55079 Missing check for thread priority CWE-770 7.5AI High AI 2025-10-15
CVE-2025-55078 Incomplete validation of kernel object pointers in system calls CWE-233 7.5AI High AI 2025-10-14
CVE-2025-2259 Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow CWE-191 7.5AI High AI 2025-04-06
CVE-2025-2260 Eclipse ThreadX NetX Duo HTTP component server denial of service CWE-459 7.5AI High AI 2025-04-06
CVE-2025-2258 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CWE-191 7.5AI High AI 2025-04-06
CVE-2025-0727 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CWE-191 7.5 - 2025-02-21
CVE-2025-0728 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow CWE-191 7.5 - 2025-02-21
CVE-2025-0726 Eclipse ThreadX NetX Duo HTTP server denial of service CWE-459 7.5 - 2025-02-21
CVE-2024-2212 Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() CWE-122 7.3 High 2024-03-26
CVE-2024-2214 Missing array size check in _Mtxinit() in the Xtensa port CWE-129 7.0 High 2024-03-26
CVE-2024-2452 Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc() CWE-120 7.0 High 2024-03-26
CVE-2023-48693 Azure RTOS ThreadX Remote Code Execution Vulnerability CWE-20 8.7 High 2023-12-05

All 15 known CVE vulnerabilities affecting threadx with full Chinese analysis, references, and POCs where available.