CVE-2026-102711
Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader
CVSS Score
0.0
EPSS Score
0.1%
EPSS Percentile
0th
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders take a module image without its length and trust the sizes and offsets in its preamble. A crafted module image can declare a code size larger than the image to read, or gain access to, the memory that follows it, and can place its entry points outside its code.
| CWE | CWE-125 CWE-345 CWE-1284 |
| Vendor | eclipse foundation |
| Product | eclipse threadx |
| Published | Sep 29, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse threadx
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse ThreadX
6.0.1 ≤ 6.5.2.202603
References
Credits
🔍 adawn0106 Frédéric Desbiens