Product by Eclipse Foundation

    Eclipse Threadx

    19 known vulnerabilities in Eclipse Threadx (Eclipse Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eclipse Threadx (Eclipse Foundation)
    HighCVE-2026-115215

    Eclipse ThreadX: Allocation of Resources Without Limits or Throttling

    —
    HighCVE-2026-115403

    NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

    —
    HighCVE-2026-95109

    Cortex-A7 module data validation checks only the first address of a caller-supplied range

    —
    HighCVE-2026-94192

    Module object deallocation can free a live ThreadX kernel object

    —
    HighCVE-2026-115231

    Eclipse ThreadX: Improper Privilege Management

    —
    HighCVE-2026-102710

    Eclipse ThreadX: Untrusted Pointer Dereference

    —
    HighCVE-2026-102709

    Eclipse ThreadX: Trust Boundary Violation

    —
    HighCVE-2026-113421

    ThreadX Modules invokes trace-full callbacks after module unload

    —
    HighCVE-2026-95107

    Module object allocation size overflow corrupts the manager object pool

    —
    HighCVE-2026-115653

    Eclipse ThreadX: Out-of-bounds Write

    —
    MediumCVE-2026-94024

    Module Manager object lookup validates one byte of a module's search name

    —
    MediumCVE-2026-115654

    Eclipse ThreadX: Missing Authorization

    —
    MediumCVE-2026-94023

    Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion

    —
    MediumCVE-2026-95108

    Deleting a user-mode module thread leaks its privileged kernel stack

    —
    MediumCVE-2026-118052

    Eclipse ThreadX: Deadlock

    —
    MediumCVE-2026-102711

    Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader

    —
    MediumCVE-2026-94202

    Module block-pool create validates two of the four parameter words it reads

    —
    MediumCVE-2026-95111

    Module queue front-send validates a word count as a byte count

    —
    HighCVE-2026-0648

    Eclipse ThreadX: Incorrect Check of Function Return Value

    also in 1 other product

    7.8

    All products by Eclipse Foundation