Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.6

VxWorks 7 USB Packets Can Crash System with Excessive Memory Use

CVE-2025-26500 · published 1 year ago
Summary

A specific type of USB packet can cause the VxWorks 7 system to use up all its memory, making it unavailable. This affects VxWorks 7 versions 22.06 through 24.03. To protect your system, update to a newer version of VxWorks.

Original advisory text
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation.   Specifically crafted USB packets may lead to the system becoming unavail...
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation.  

Specifically crafted USB packets may lead to the system becoming unavailable

This issue affects VxWorks 7: from 22.06 through 24.03.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published21 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-26500 · NVD
Track software like this
Free during beta