Product by Eclipse Foundation
Eclipse Threadx
19 known vulnerabilities in Eclipse Threadx (Eclipse Foundation), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-115215 | Eclipse ThreadX: Allocation of Resources Without Limits or Throttling | — | |
| High | CVE-2026-115403 | NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full | — | |
| High | CVE-2026-95109 | Cortex-A7 module data validation checks only the first address of a caller-supplied range | — | |
| High | CVE-2026-94192 | Module object deallocation can free a live ThreadX kernel object | — | |
| High | CVE-2026-115231 | Eclipse ThreadX: Improper Privilege Management | — | |
| High | CVE-2026-102710 | Eclipse ThreadX: Untrusted Pointer Dereference | — | |
| High | CVE-2026-102709 | Eclipse ThreadX: Trust Boundary Violation | — | |
| High | CVE-2026-113421 | ThreadX Modules invokes trace-full callbacks after module unload | — | |
| High | CVE-2026-95107 | Module object allocation size overflow corrupts the manager object pool | — | |
| High | CVE-2026-115653 | Eclipse ThreadX: Out-of-bounds Write | — | |
| Medium | CVE-2026-94024 | Module Manager object lookup validates one byte of a module's search name | — | |
| Medium | CVE-2026-115654 | Eclipse ThreadX: Missing Authorization | — | |
| Medium | CVE-2026-94023 | Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion | — | |
| Medium | CVE-2026-95108 | Deleting a user-mode module thread leaks its privileged kernel stack | — | |
| Medium | CVE-2026-118052 | Eclipse ThreadX: Deadlock | — | |
| Medium | CVE-2026-102711 | Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader | — | |
| Medium | CVE-2026-94202 | Module block-pool create validates two of the four parameter words it reads | — | |
| Medium | CVE-2026-95111 | Module queue front-send validates a word count as a byte count | — | |
| High | CVE-2026-0648 | Eclipse ThreadX: Incorrect Check of Function Return Value | 7.8 |