CVE-2024-2214CWE-129

Missing array size check in _Mtxinit() in the Xtensa port

High · published March 26, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the

Xtensa port was missing an array size check causing a memory overwrite.

The affected file was ports/xtensa/xcc/src/tx_clib_lock.c

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-03-26T15:48Z
EPSS history
Timeline
  • 26 MAR 15:48Z
    Missing array size check in _Mtxinit() in the Xtensa port
    cvelistv5