CVE-2024-2212

In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet()functions from the FreeRTOS compatibility API(utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missingparameter checks. This could lead to integer wraparound,under-allocations and heap buffer overflows.

CVE-2024-2214

In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in theXtensa port was missing an array size check causing a memory overwrite.The affected file was ports/xtensa/xcc/src/tx_clib_lock.c