Skip to contentEclipse Foundation Threadx vulnerabilities
- eclipse foundation threadx netx duoUnbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallCVE-2026-1027138.3 High
- eclipse foundation threadx netx duoOut-of-bounds read in the NetX Secure DTLS ClientHello parserCVE-2026-1027126.3 Medium
- eclipse foundation threadxOut-of-bounds Read and Unverified Entry Pointers in the ThreadX Module LoaderCVE-2026-1027116.9 Medium
- eclipse foundation threadxAttacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION`...CVE-2026-1027108.5 High
- eclipse foundation threadxImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC)...CVE-2026-1027098.4 High
- eclipse foundation threadxAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at...CVE-2026-1027578.5 High
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally call…CVE-2026-115767.5 High
- eclipse threadxThe vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get_…CVE-2026-06487.8 High
- eclipse threadx usbx, eclipse foundation threadx - usbx +1 moreThe function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursi…CVE-2025-550954.2 Medium
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreA denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source…CVE-2025-551028.7 High
- eclipse threadxImproper Parameter Check in ThreadX Syscall ImplementationCVE-2025-550807.2 High
- eclipse threadxMissing check for thread priorityCVE-2025-550795.7 Medium
- eclipse threadxIncomplete validation of kernel object pointers in system callsCVE-2025-550785.7 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowCVE-2025-22595.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP component server denial of serviceCVE-2025-22607.1 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-22585.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07275.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-07285.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server denial of serviceCVE-2025-07267.1 High
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()CVE-2024-22127.3 High
- eclipse threadxMissing array size check in _Mtxinit() in the Xtensa portCVE-2024-22147.0 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()CVE-2024-24527.0 High
- azure-rtos threadx, microsoft azure rtos threadx +1 moreAzure RTOS ThreadX Remote Code Execution VulnerabilityCVE-2023-486938.7 High