Skip to contentEclipse Foundation Threadx vulnerabilities
- eclipse foundation threadx netx duoUnbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallCVE-2026-1027138.3 High
- eclipse foundation threadx netx duoOut-of-bounds read in the NetX Secure DTLS ClientHello parserCVE-2026-1027126.3 Medium
- eclipse foundation threadxOut-of-bounds Read and Unverified Entry Pointers in the ThreadX Module LoaderCVE-2026-1027116.9 Medium
- eclipse foundation threadxAttacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION`...CVE-2026-1027108.5 High
- eclipse foundation threadxImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC)...CVE-2026-1027098.4 High
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally call…CVE-2026-115767.5 High
- eclipse threadxThe vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_…CVE-2026-06487.8 High
- eclipse threadx usbx, eclipse foundation threadx - usbx +1 moreThe function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi…CVE-2025-550954.2 Medium
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…CVE-2025-551028.7 High