Eclipse Foundation Eclipse ThreadX vulnerabilities

Newest CVEs

• CVE-2026-113421

  ThreadX Modules invokes trace-full callbacks after module unload

  Eclipse Foundation · Eclipse ThreadX

  High7.3
• CVE-2026-115231

  User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

  Eclipse Foundation · Eclipse ThreadX

  High8.5
• CVE-2026-115215

  NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool

  Eclipse Foundation · Eclipse ThreadX

  High8.7
• CVE-2026-115403

  NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

  Eclipse Foundation · Eclipse ThreadX

  High8.2
• CVE-2026-115654

  User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

  Eclipse Foundation · Eclipse ThreadX

  Medium6.9
• CVE-2026-115653

  Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode

  Eclipse Foundation · Eclipse ThreadX

  High7.0
• CVE-2026-118052

  Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

  Eclipse Foundation · Eclipse ThreadX

  Medium6.8
• CVE-2026-95107

  Module object allocation size overflow corrupts the manager object pool

  Eclipse Foundation · Eclipse ThreadX

  High7.0
• CVE-2026-94202

  Module block-pool create validates two of the four parameter words it reads

  Eclipse Foundation · Eclipse ThreadX

  Medium4.8
• CVE-2026-95108

  Deleting a user-mode module thread leaks its privileged kernel stack

  Eclipse Foundation · Eclipse ThreadX

  Medium6.8