# CVE-2025-55095: The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device…

Source: https://junglewise.ai/threats/cve-2025-55095-the-function-ux-host-class-storage-media-mount-is-responsible-for  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-27  
License: CC BY 4.0 with a link back

CVE-2025-55095 · Severity: medium · CVSS 4.2 · Published 2026-01-27

The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition.

This recursion occurs in _ux_host_class_storage_partition_read(), which parses up to four partition entries. If an extended partition is found (with type UX_HOST_CLASS_STORAGE_PARTITION_EXTENDED or EXTENDED_LBA_MAPPED), the code invokes:
            _ux_host_class_storage_media_mount(storage, sector + _ux_utility_long_get(...));


There is no limit on the recursion depth or tracking of visited sectors. As a result, a malicious or malformed disk image can include cyclic or excessively deep chains of extended partitions, causing the function to recurse until stack overflow occurs.

Technologies: [Eclipse Threadx Usbx](https://junglewise.ai/threats/technologies/threadx-usbx). Vendors: [Eclipse](https://junglewise.ai/threats/vendors/eclipse).

## Quick answers

**Is CVE-2025-55095 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-55095 being exploited in the wild.

**How severe is CVE-2025-55095?** Medium severity, with a CVSS score of 4.2, published 27 January 2026.

**Which products and versions are affected?** Eclipse Threadx Usbx. The advisory does not name versions.

**Is there a fix for CVE-2025-55095?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-55095?** Check whether you run Eclipse Threadx Usbx. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Eclipse Threadx Usbx

## Related threats

- [In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55100-in-usbx-before-6-4-3-the-usb-support-module-for-eclipse)
- [In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55099-in-usbx-before-6-4-3-the-usb-support-module-for-eclipse)
- [In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55098-in-usbx-before-6-4-3-the-usb-support-module-for-eclipse)
- [In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55097-in-usbx-before-6-4-3-the-usb-support-module-for-eclipse)
- [In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55096-in-usbx-before-6-4-3-the-usb-support-module-for-eclipse)