🔐 CVE Alert

CVE-2026-118052

UNKNOWN 0.0

Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module load, start, stop and unload from other threads until the system is reset.

CWE CWE-667 CWE-833
Vendor eclipse foundation
Product eclipse threadx
Published Nov 2, 2026
Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse threadx

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Eclipse Foundation / Eclipse ThreadX
6.0.1 ≤ 6.5.2.202603

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-67ww-q8x2-g487 gitlab.eclipse.org: https://gitlab.eclipse.org/security/cve-assignment/-/work_items/511

Credits

Frédéric Desbiens