GHSA-h963-7vhw-8rpx: Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()

In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows.

If an attacker could control the size or alignment arguments to the __portable_aligned_alloc() function, they could cause an integer wraparound thus causing malloc() to allocate a small amount of memory, exposing to subsequent heap buffer overflows (AKA BadAlloc-style memory corruption).

The vulnerable code has been removed.

https://github.com/eclipse-threadx/netxduo/commit/3fae1c0768989c5ddbe19a79e787c0499d9396b5