Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
6.4.x	✅

Reporting a Vulnerability

If you think you have found a vulnerability in you can report it using one of the following ways:

Contact the Eclipse Foundation Security Team
Report a Vulnerability

You can find more information about reporting and disclosure at the Eclipse Foundation Security page.

Security Policy

This project follows Eclipse Foundation Vulnerability Reporting Policy.

Missing array size check in _Mtxinit() in the Xtensa port
GHSA-vmp6-qhp9-r66x published Mar 26, 2024 by mrybczyn

High
Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()
GHSA-v9jj-7qjg-h6g6 published Mar 26, 2024 by mrybczyn

High
Azure RTOS ThreadX Remote Code Execution Vulnerability
GHSA-p7w6-62rq-vrf9 published Dec 3, 2023 by rkolandaivel

High

Learn more about advisories related to eclipse-threadx/threadx in the GitHub Advisory Database