Filtered by vendor Eclipse Subscriptions
Filtered by product Threadx/threadx Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-102711 1 Eclipse 1 Threadx/threadx 2026-11-04 N/A
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders take a module image without its length and trust the sizes and offsets in its preamble. A crafted module image can declare a code size larger than the image to read, or gain access to, the memory that follows it, and can place its entry points outside its code.
CVE-2026-102710 1 Eclipse 1 Threadx/threadx 2026-11-03 N/A
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protected module register any function pointer as the kernel's trace-buffer-full callback, which the kernel calls from privileged code when the trace buffer wraps. A malicious module can thereby run its own code with kernel privilege, defeating module isolation, or fault the kernel with an invalid pointer.