Skip to content
Eclipse Foundation Guix vulnerabilities
-
eclipse foundation threadx - guix
Out-of-bounds read when a multi-line text view string ends with a carriage return
CVE-2026-91057
4.6 Medium
-
eclipse foundation threadx - guix
JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode
CVE-2026-92454
6.8 Medium
-
eclipse foundation threadx - guix
JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size
CVE-2026-91059
6.8 Medium
-
eclipse foundation threadx - guix
GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme
CVE-2026-91189
7.1 High
-
eclipse foundation threadx - guix
GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
CVE-2026-92446
6.8 Medium
-
eclipse foundation threadx - guix
Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena
CVE-2026-92449
6.8 Medium
-
eclipse foundation threadx - guix
PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write
CVE-2026-91186
8.4 High
-
eclipse foundation guix
The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx_page_header_data_size is…
CVE-2026-103414
8.4 High
-
eclipse foundation guix
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it...
CVE-2026-102729
5.9 Medium