Vulnerabilities > Eclipse > Threadx > High

DATE CVE VULNERABILITY TITLE RISK
2024-03-26 CVE-2024-2212 Integer Overflow or Wraparound vulnerability in Eclipse Threadx
In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks.
local
low complexity
eclipse CWE-190
7.8
2024-03-26 CVE-2024-2214 Improper Validation of Array Index vulnerability in Eclipse Threadx
In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite.
local
low complexity
eclipse CWE-129
7.8