CVE-2024-2452

Summary

CVE-2024-2452 is a vulnerability affecting Eclipse ThreadX NetX Duo before version 6.4.0. An attacker can manipulate the parameters of the __portable_aligned_alloc() function, leading to an integer wrap-around and an allocation smaller than expected. This issue can result in subsequent heap buffer overflows.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.