Eclipse Foundation NetX Duo

• CVE-2026-103415 Critical 9.3 When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the con 0.3%
• CVE-2026-102717 High 7.5 MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash 0.3%
• CVE-2026-102762 High 8.2 The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing re 0.2%
• CVE-2026-102761 Critical 9.3 NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound belongs to the current packet. With the st 0.3%
• CVE-2026-102760 High 8.3 When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already h 0.2%
• CVE-2026-102759 Medium 6.3 NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted application record whose length equals the negotiate 0.2%
• CVE-2026-102758 High 7.5 The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, a 0.2%
• CVE-2025-55085 High 8.8 Web http client: Unchecked Server-Side Malicious Packet Issue 0.6%
• CVE-2025-55096 Low 2.1 Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get() 0.2%
• CVE-2025-55094 Medium 6.9 Potential out-of-bounds read in _nx_icmpv6_validate_options() 0.4%
• CVE-2025-55093 Medium 6.9 Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages 0.3%
• CVE-2025-55092 Medium 6.9 Potential out of bound read in _nx_ipv4_option_process() 0.3%
• CVE-2025-55091 Medium 6.9 Potential out of bound read in _nx_ip_packet_receive() 0.4%
• CVE-2025-55090 Medium 6.9 Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo 0.4%
• CVE-2025-55084 Medium 6.9 Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension() 0.3%
• CVE-2025-55083 Medium 6.9 Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension() 0.3%
• CVE-2025-55082 Medium 6.9 Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find() 0.3%
• CVE-2025-55081 Medium 6.9 Potential out of bound read in _nx_secure_tls_process_clienthello() 0.4%